Asset Security
Question #70
According to HIPAA, which of the following types of information are correctly classified as Personal Health Information (PHI)? (Choose all that apply)
A. Only information regarding contagious diseases.
B. Only information regarding current physical illnesses.
C. Only information that has been digitized and stored in an EHR.
D. Any information relating to future physical/mental conditions AND any information received or created by a health care provider.
Domain Concept: Asset Security
This scenario evaluates management-level decision making in Asset Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.