Government Acts and Information Classification

Questions and Answers

Which of the following government acts protects medical records and personal health information?

SOX

HIPAA (correct)

FERPA

FISMA

Match the security classification with its description:

Unclassified = This information can be accessed by the public and poses no security threat. Sensitive but unclassified = If this information is disclosed, it could cause some harm, but not a national disaster. Confidential = Release of this information could cause damage to military efforts. Secret = If this information is disclosed, it could cause severe and permanent damage to military actions. Top secret = If this information is released, it poses grave consequences to national security.

Which of the following data destruction techniques uses a punch press or hammer system to crush a hard disk?

Degaussing

Formatting

Pulverizing (correct)

Shredding

When disposing of a computer or selling used hardware, which of the following actions can you take to ensure that no data is recoverable?

Damage the hard disks so badly that all data remanence is gone Signup and view all the answers

Match the sensitivity classification with its description:

Low = Could cause personal embarrassment or inconvenience. Medium = Could cause operational harm such as loss of confidence or damage to reputation. High = Could cause operational harm such as loss of control or loss of public trust. Signup and view all the answers

If you lose your wallet or purse and it ends up in the wrong hands, what classification does the following information fall into: Name and address, Driver license number, Credit card numbers, Date of birth?

Personally identifiable information Signup and view all the answers

Study Notes

Medical Records Protection

HIPAA (Health Insurance Portability and Accountability Act) safeguards medical records and personal health information.

Information Classification in Government and Military

Classification levels include:
- Unclassified: Publicly accessible, poses no security threat.
- Sensitive but Unclassified: Disclosure could cause some harm but not a national disaster.
- Confidential: Release could harm military efforts.
- Secret: Disclosure could severely damage military actions.
- Top Secret: Release poses grave consequences to national security.

Data Destruction Technique

Pulverizing is a method that uses a punch press or hammer to crush hard disks, ensuring data cannot be recovered.

Ensuring Data Irrecoverability

To securely dispose of a computer or used hardware, it is essential to damage hard disks to the extent that all data remanence is eliminated.

Information Security Classification Framework

Classifications based on sensitivity levels include:
- High: Could lead to loss of life or social hardship; may also cause operational harm, like loss of control.
- Medium: Could cause personal hardship or operational harm, such as loss of confidence and damage to reputation.
- Low: Could cause personal embarrassment or inconvenience.

Personally Identifiable Information (PII)

Information such as name, address, driver license number, credit card numbers, and date of birth qualifies as personally identifiable information, which can be harmful if misused.

Description

Test your knowledge on key government acts that safeguard medical records, such as HIPAA. Additionally, explore the classification system utilized by government and military organizations, ranging from unclassified to top secret. This quiz is designed to enhance your understanding of health privacy and information security.