Example of a risk that an organization might encounter.

List and briefly describe the risk analysis steps described in this chapter.

 2.Name three categories of threats, and give an example of each.

 3.How do internal and external medical identity theft differ from each other?

 4.Select an example of a risk that an organization might encounter. Assess it in terms of likelihood and impact using the qualitative approach, and determine its score. How did you reach this conclusion?

 5.Which of the provisions in figure 5.1 do you think is the most important? Why?

 6.Breaches of protected health information (PHI) can occur with PHR vendors that are HIPAA covered entities or business associates, as well as those that are not. How do the consequences differ, depending on whether the vendor is bound by HIPAA or not?

 7.Describe the types of HIE architecture models.

 8.Describe the types of HIE consumer permission models for the inclusion of patient information.

 9.Identify and explain the components of a business continuity plan.

10.”Reactive” is one category of threat controls. Describe a positive and negative aspect of this control category.