A hospital is reviewing its electronic protected health information (ePHI) safeguards. Which measures directly support integrity or auditability?
Answer
File integrity monitoring, Checksums and digital signatures, Version control systems, Audit trails that help reconstruct events
Explanation
### Why this is right
- **A** is true: file integrity monitoring alerts administrators to unauthorized changes.
- **B** is true: checksums and digital signatures can help track or verify changes to files.
- **C** is true: version control systems track changes to critical files.
- **D** is true: audit trails support post-incident reconstruction and review.
### The concept
Integrity safeguards help preserve data accuracy and identify improper alteration or destruction. Auditability is the ability to review records of activity and investigate what happened. The two ideas connect but are not identical: file-change measures focus on detecting modification, while audit trails focus on recording activity. Encryption protects the confidentiality of stored information, but encryption alone does not show that a file has remained unchanged.
### The other options
- **E. Encryption of stored data as the sole change-detection measure**: encryption protects confidentiality if storage is exposed, but it is not by itself a method for detecting unauthorized changes.
### Terms
- **Auditability**: the ability to examine records and establish what activity occurred.
- **Version control**: a method for recording and managing changes to files over time.
- **Checksum**: a computed value used to help check whether data has changed.
### Remember
Audit trails explain activity; integrity measures help verify that data has not been improperly changed.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free