Question

the security officer is responsible to review all
business associate contracts for compliancy issues.
trading partner agreements to ensure they are fully complying with hipaa rules.
both a and b as required by organization requirements of security rule.
neither a nor b in order to comply with the security rule.
question 8 (2.5 points)
information access is a required administrative safeguard under hipaa security rule.
it is defined as
access to the medical record for treatment purposes.
limiting access to the minimum necessary for the particular job assigned to the
particular login.
restricting access to only clinical staff for treatment purposes, medical records
department for coding purposes, and the billing department for purposes of
claim submission.

Explanation:

First Question (Security Officer's Responsibility)

The HIPAA Security Rule's Organization Requirements may mandate the Security Officer to review Business Associate contracts (for compliancy) and Trading Partner agreements (for HIPAA compliance). So "Both A and B..." is correct.

HIPAA's "minimum necessary" standard for information access means limiting access to what's needed for a job. The first option is treatment access (not the definition here), the third is department - specific access (not the core definition of the administrative safeguard's "information access" here). The second option matches the "minimum necessary" concept.

Answer:

C. Both A and B as required by Organization Requirements of Security Rule.

Question 8 (Information Access under HIPAA)