The instructor is preparing information to include during training on the new computer information system. Which policies should be included in the content? Select all that apply.

Question

A) Patient privacy and security
B) Password security
C) Computer literacy
D) System-error correction
E) System idiosyncrasies

Answer 1

A) Patient privacy and security
B) Password security
D) System-error correction
E) System idiosyncrasies

Explanation: A) A chart-access policy addresses the user ability to access a patient's healthcare record on a need-to-know basis, such that only persons directly involved in the care of a patient may access this information. Many health information systems are able to block a caregiver's access to patient records that have not been assigned to that particular caregiver, without that caregiver documenting the reason for the access. In addition, a patient-focused, privacy-and-security policy should address proper storage and disposal of paper-and-electronic documents containing protected patient information.
B) The lack of password protection can produce unauthorized access into secured health information and the potential for user fraud if one user is able to access a system, patient chart, and functionality of a role through password theft. Password policies not only stipulate protection of personal passwords but also may define the length and complexity of a password and the frequency of password changes.
C) Computer literacy is not a policy to include during training.
D) Errors can be made during electronic charting, and error mitigation and correction is covered by policy, which may include the proper methods to change erroneous information, the time frame allowed for correction, and the error-correction escalation process.
E) System idiosyncrasies is not a policy to include during training.