An IS auditor is conducting a physical security audit of a healthcare facility and finds closed-circuit television (CCTV) systems located in a patient care area. Which of the following is the GREATEST concern?
A.
There are no notices indicating recording is in progress.
B.
Cameras are not monitored 24/7.
C.
There are no backups of the videos.
D.
The retention period for video recordings is undefined.
A. There are no notices indicating recording is in progress.
In a healthcare facility, patient privacy is paramount. The absence of notices indicating that recording is in progress can lead to significant privacy violations and legal issues, as patients and staff may not be aware that they are being recorded. This lack of transparency can undermine trust and potentially violate privacy regulations.
Answer B
the absence of 24/7 monitoring poses a more immediate and significant risk to patient safety and security.
People's safety and security ALWAYS come FIRST
In a healthcare facility, the GREATEST concern among the options provided would typically be related to patient privacy and confidentiality.
A. There are no notices indicating recording is in progress:
While it's important to notify individuals if they are being recorded, the lack of notices, while a concern, may not be as significant as the other options.
So, in the context of a healthcare facility and considering patient privacy, the GREATEST concern would be option D: The retention period for video recordings is undefined. This poses a risk to patient data privacy and compliance with relevant regulations such as HIPAA (Health Insurance Portability and Accountability Act) in the United States, which governs the security and privacy of healthcare data.
A - there are no notices indicating recording is in progress. It is important to inform patients and staff when CCTV systems are in use for recording. This will help to ensure that their privacy is not violated. Patients have the right to know when and why they are being recorded. Additionally, the facility must follow the legal requirements to inform individuals about the use of CCTV systems and obtain their consent.
A - there are no notices indicating recording is in progress. It is important to inform patients and staff when CCTV systems are in use for recording. This will help to ensure that their privacy is not violated. Patients have the right to know when and why they are being recorded. Additionally, the facility must follow the legal requirements to inform individuals about the use of CCTV systems and obtain their consent.
I think it should be C as not having backup is much worse than not having retention policy
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
pLulu
3 months, 3 weeks agoRS66
8 months agoa84n
10 months, 2 weeks agoBA27
1 year, 5 months agoSuperMax
1 year, 5 months ago007Georgeo
1 year, 10 months ago007Georgeo
1 year, 10 months agoBabaP
1 year, 10 months agosaado9
2 years agoJag127
2 years ago