Question

When it comes to HIPAA compliance, what's the difference between a policy and a procedure? AO A policy should be tested, while procedures don't need to be tested. BO A policy states rules, but not how to follow them, while a procedure gives details about how to complete tasks. CO A policy is technology-specific, while a procedure is technology-neutral. DO A policy should be changed frequently, while procedures should be updated infrequently 35 Which framework was developed jointly by the International Standards Organization and the International Electrotechnical Commission for most types of industries? AO NIST Special Publication 800-53. BO COSO: Enterprise Risk Management. CO ISO 15408 DO ISO 17799

Answer 1

34) The correct option is B ) A policy states rules , but not how to follow them while a procedure gives details about how to complete tasks .

35) The correct option is D) ISO 17799. ISO and the International Electrotechnical Commission (IEC) as ISO/IEC 17799 in 2000 as a framework for information security