RHIA Prep Domain 1 Section 5

An organization-wide framework for managing information so it is trustworthy, secure, compliant, available, and useful throughout its life cycle.

Information governance (IG)

The operational processes used to collect, maintain, store, retrieve, and distribute information.

Information management

Information or data that have value to the organization and therefore require appropriate management and protection.

Information asset

The coordinated management of valuable information resources throughout their life cycle.

Information asset management

A broad approach to managing information consistently across the entire organization.

Enterprise information management (EIM)

The stages information passes through from creation or receipt through use, storage, retention, and final disposition.

Information life cycle

A formal statement of organizational expectations and direction that guides decisions and actions.

Policy

A detailed set of steps describing how a policy or process is carried out.

Procedure

The structures, accountability, decision rights, and oversight used to direct and control organizational information practices.

Governance

Accountability for the definition, quality, appropriate use, and protection of specific organizational data assets.

Data stewardship

The person or business function with authority and accountability for a defined set of data.

Data owner

A documented schedule specifying how long different categories of records or information must be kept.

Retention schedule

The final action taken with information at the end of its retention period, such as destruction or authorized transfer.

Disposition

Policies and procedures governing the receipt, removal, movement, reuse, and disposal of devices and media containing health information.

Device and media controls

A method of disposing of information or media so the information cannot be reconstructed or recovered.

Secure destruction

Under HIPAA, a person or organization that performs certain services for a covered entity involving protected health information.

Business associate

Adherence to applicable laws, regulations, accreditation

requirements, standards, and organizational policies.

Compliance

A requirement established by an accrediting organization that healthcare organizations may be evaluated against.

Accreditation standard

A duty imposed by applicable federal or state law that affects how health information is created, maintained, retained, or disclosed.

Legal requirement

The process of identifying, assessing, and reducing risks that could harm the organization, patients, or information assets.

Risk management

A chronological record of system activity that can show who accessed or changed information and when.

Audit trail

Assurance that the originator of an electronic action or transaction cannot credibly deny having performed it.

Nonrepudiation

Documentation of what records were destroyed, when, by what method, and under whose authority.

Record destruction log

A long-term plan that aligns information governance goals,

responsibilities, controls, and priorities with organizational objectives.

Strategic information governance plan