CISA · Question #63
An IS auditor is conducting a physical security audit of a healthcare facility and finds closed-circuit television (CCTV) systems located in a patient care area. Which of the following is the…
The correct answer is A. There are no notices indicating recording is in progress. The greatest concern for an IS auditor finding CCTV in a patient care area without notices is the violation of patient privacy due to unannounced recording.
Question
An IS auditor is conducting a physical security audit of a healthcare facility and finds closed-circuit television (CCTV) systems located in a patient care area. Which of the following is the GREATEST concern?
Options
- AThere are no notices indicating recording is in progress.
- BCameras are not monitored 24/7.
- CThere are no backups of the videos.
- DThe retention period for video recordings is undefined.
How the community answered
(52 responses)- A85% (44)
- B6% (3)
- C8% (4)
- D2% (1)
Why each option
The greatest concern for an IS auditor finding CCTV in a patient care area without notices is the violation of patient privacy due to unannounced recording.
In a healthcare setting, patients have a reasonable expectation of privacy, especially in patient care areas, and recording them without explicit notification constitutes a significant privacy breach. This directly violates principles of informed consent and potentially regulations like HIPAA, making it the most immediate and critical concern for an IS auditor.
While 24/7 monitoring enhances security, the lack of constant human monitoring is less critical than the fundamental privacy violation of unannounced recording in a sensitive area.
Concept tested: Privacy concerns in surveillance (healthcare)
Source: https://www.hhs.gov/hipaa/for-professionals/privacy/index.html
Topics
Community Discussion
No community discussion yet for this question.