Which is NOT a mechanism for protecting the security of health data?

• A. Automatic sign-offs
• B. A Strong Password
• C. Having one password per nursing unit
• D. Firewalls

Answer: (C)

Security of health data relies on strong authentication, proper access control, and network protection. Automatic sign-offs reduce risk by ending idle sessions, so unattended workstations can’t be used to access PHI. A strong password makes it much harder for unauthorized users to gain entry. Firewalls create a protective barrier that limits unauthorized network traffic to and from internal systems.

Having one password for a nursing unit, however, undermines these protections. Shared credentials remove individual accountability and make it difficult to track who accessed what. If that single password is compromised, many people gain access at once, and revoking access or auditing activity becomes impractical. Because it doesn’t enable proper identity verification or granular access control, a unit-wide password is not a mechanism that protects health data.