The principle of holding individuals accountable for their internal control responsibilities in pursuit of company objectives belongs to which of the following ‘COSO Internal Control – Integrated Framework’ components?

According to the ‘COSO – ERM Integrating Strategy and Performance’ framework, the principle of defining the organization’s risk appetite in the context of creating, preserving and realizing value belongs to which of the following components?

The Committee of Sponsoring Organizations of the Treadway Commission (COSO) is comprised of five (5) organizations that focus on providing guidance on improving systems of internal control to executives and government.  Please select the five (5) organizations that comprise COSO (i.e., check all that apply)

Cloud computing provides access to shared resources over the internet, such as computer processing, software applications, data storage, and other services and can be deployed through various models and provide various levels of service.  Choose from the drop-down menus the Deployment Model that has the greatest risk (e.g., data leakage, security breach, etc.) and the Service Model that provides, you the user, the lowest amount of control over how the services operate? Deployment Model Service Model [deploymentmodel1] [servicemodel1]

Which of the following is not an example of a detective control?

Which of the following is in the correct order from the most general to the most specific?

What cells of the immune system are destroyed by the agent that causes AIDS?

Which one of the following cells is not specifically related to the cell mediated system of immunity?

You are the HIM director at a new long-term care facility. You are working with IT to develop access controls for your staff, which will consist of two coding professionals, one scannertechnician, one chart analyzer, one clerk to handle the release of information and incomplete records, and three transcriptionists.The three types of access controls, noting the differences. • User-based: access granted strictly by an individual with a specific set of privileges; will be difficult to maintain• Role-based: access granted by function a person is performing• Context-based: access granted by person and role along with information permissible to be accessed; may include restrictions on location and time as well Recommend the type of access control to assign to each staff member. Coding professional and transcriptionists  

A data dictionary for the patient’s address and phone number follows. Field Name Data Type DescriptionPatient_Street Text Street addressPatient_City Text City namePatient_State Text Postal code for the statePatient_Zip code Text 5-digit zip codePatient_Phone Text Phone number Margaret begins to enter the patient’s telephone number, 616-256-6767, and only gets as far as 616-256-67 when the field will not accept any more characters. Identify this issue and explain how it can be corrected. The phone number field seems to be built to accept only 10 characters, which would account for the numbers with no dashes. More detailed instructions for completing that field would be helpful to users.