HCISPP · Question #131
Which is NOT one of the three major categories of Security Safeguards identified by HIPAA in the regulations?
The correct answer is B. Professional. "Professional" is not a HIPAA security safeguard category - HIPAA's Security Rule defines exactly three: Administrative, Physical, and Technical safeguards, and "Professional" appears nowhere in that framework. Administrative safeguards cover policies, procedures, and workforce…
Question
Which is NOT one of the three major categories of Security Safeguards identified by HIPAA in the regulations?
Options
- AAdministrative
- BProfessional
- CPhysical
- DTechnical
How the community answered
(34 responses)- B91% (31)
- C3% (1)
- D6% (2)
Explanation
"Professional" is not a HIPAA security safeguard category - HIPAA's Security Rule defines exactly three: Administrative, Physical, and Technical safeguards, and "Professional" appears nowhere in that framework. Administrative safeguards cover policies, procedures, and workforce training (e.g., risk analysis, access management policies). Physical safeguards govern the physical protection of systems and facilities (e.g., workstation locks, facility access controls). Technical safeguards address technology-based controls that protect ePHI (e.g., encryption, audit controls, automatic logoff).
Memory tip: Use the acronym APT - Administrative, Physical, Technical. If a choice sounds credential-based or role-based (like "Professional"), it's a distractor; HIPAA safeguards are about controls, not job titles.
Topics
Community Discussion
No community discussion yet for this question.