What administrative safeguard puts into place measures to assure that only authorized persons have access to electronic personal health information?

Question

Options

• ALog-in monitoring
• BInformation management
• CWorkforce security
• DTermination procedures

• B
  7% (2)
• C
  89% (25)
• D
  4% (1)

Explanation

Workforce Security (C) is the HIPAA administrative safeguard that ensures only authorized individuals can access electronic protected health information (ePHI) - it covers policies for granting, modifying, and revoking access based on job roles and least-privilege principles.

Why the distractors are wrong:

• A (Log-in monitoring) is a technical control that tracks access attempts after authorization is already granted - it's a sub-component, not the overarching safeguard.
• B (Information management) is too vague and not a defined HIPAA safeguard category; it describes a general concept, not a specific standard.
• D (Termination procedures) is a subset of workforce security - it handles revoking access when employment ends, but doesn't cover the full scope of access authorization.

Memory tip: Think "Workforce Security = Who gets the keys?" - it's about controlling which workers are authorized to access ePHI, making it the broadest and most correct answer for any question about authorization policies for people.

No community discussion yet for this question.