CompTIA Healthcare IT Technician

1.0 Regulatory Requirements

1.1Identifystandardagencies, laws, andregulations.

·    HHS

·    ONC

·    CMS

·    HIPAA

·    Medicare

·    Medicaid

·    ARRA

·    HITECH

·    Meaningful use

·    Eligibleprovider

·    NIST

1.2 Explain and classifyHIPAA controls andcomplianceissues.

·    PHI

·    Covered Entity

·    Security

·    HIPAA Security

oViolations

oFines

oRequirements

·    Releaseof information

·    Access permissions

1.3 Summarizeregulatoryrules of record retention, disposal, and archiving.

·    Documentation requirements

oTime ofstorage

·    Types of records

oPublicrecords

oPrivate records

oLegal health record

·    Methods ofrecord disposal

1.4 Explain and interpret legal best practices, requirements, and documentation.

·    Waivers of liability

·    Business AssociateAgreements (BAA)

·    Third partyvendorreview and agreements (SLA,MOU)

2.0 Organizational Behavior

2.1 Usebest practices forhandlingPHIin theworkplace.

·    PC placement

·    Privacyscreens

·    Printer placement

·    Screensavers

·    Time lockout

2.2 Identify EHR/EMR access rolesand responsibilities.

·    Medical roles

oMD oRN oPA oDA

oPCT

oMA

oNUC

oUA

oLPN

oPM

oOfficeMgr.

oStaff

·    Technicalroles

oSecurityadministrator oNetworkadministrator oSystem administrator

oDesktop support

oDatabaseadministrator

·    Business AssociateAccess and Contractor Access

·    Access limitations basedon role and exceptions

oEmergencyaccess (breakthe glass)

·    Access based on sensitivepatient data

oSensitivitylabelsand clearance

2.3 Apply proper communication methods in the workplace.

·    Email

·    IM vs. securechat

·    EMR system

·    Fax

·    SecureFTP

·    Phone

·    VoIP

2.4 Identify organizational structures anddifferent methods of operation.

·    Organizational Structures:

oHospital

oPrivate practice

oNursinghomes

oAssisted livingfacilities

oHomehealthcare

oHospice

oSurgicalcenters

·    Methods:

oDifferences in scopeofwork

oAvailabilityof resources

oFormalityof procedures

2.5 Given ascenario, execute dailyactivities whilefollowing acodeof conduct.

·    Communicate in aprofessional fashion

·    Adapt procedural behavioraccordingto differentsituations and environments

·    Imaging room

oProcedural room

oRecoveryroom

oExamination room

oFloat room

oEmergencyroom

·    Adapt social behavior based on sensitivityof theenvironment

·    Useproper sanitation steps– follow medical precautionaryguidelines

·    Conform to requirementsset forth byproject manager

3.0 IT Operations

3.1 Identify commonly used IT terms and technologies.

·    Protocol terms: oTCP/IP oDNS

oDHCP

oFTP

oWireless (802.11x)

oRDP

·    Devices:

oSwitch

oDomain controller

oPrinter server

·    Industry terms:

oASP

oISP

oClient-server model

oMainframe

oCloud Computing

oVirtualization

oTerminal services

oAPIs

oFiber

·    Languages:

oXML

oSQL

oHTML

oFlash

oPHP

oASP

3.2 Demonstrate the ability to setup a basic PC workstation within an EHR/EMR

environment.

·    Basic installation, configuration and maintenanceprocedures

·    Basics ofoperatingsystems, mouse,keyboard, monitorand applications

3.3 Given ascenario, troubleshoot and solvecommon PC problems.

·    Malfunctioninghardware

o Mouse o Printer oPower

oMonitor

oCables

·    Softwarepatches/hotfixes/updates

·    Documentation

3.4 Install and configure hardware drivers and devices.

·    Imagingdevices:

oBarcodescanner

oDocument scanner

oCard/badgescanner

oFaxprinter

oCamera

oSignaturepads

·    Physical interfaces:

oUSB

oIEEE 1394

oSCSI

oSerial

oBluetooth

·    Mobile storagedevices:

oFlash drives

oExternal hard drives

oDVDs

oCDs

oTapes

oSD cards

·    Mobile devices:

oTablet PCs

oSmart phones

oPortablemediaplayers

3.5 Compareand contrast basic client networks and tools.

·    DHCPvs. staticIP

·    Adhocvs. infrastructure

·    Command lineprompts

oping

oipconfig

otracert

3.6 Setup basic network devices and apply basic configuration settings.

·    Wireless access point

oSecuritysettings

oSSID

oGuest network

oAccess point placement

·    Router

oDHCP

oPort forwarding

·    Internet modem

3.7 Given ascenario, troubleshoot and solvecommon network problems.

·    Cabling

·    Power

·    IPsettings

·    ISP

·    Interference

·    Signal issues

3.8 Explain the featuresofdifferentbackupconfigurations and the associated maintenancepractices.

·    Daily

·    Differential

·    Incremental

·    Archive flags

3.9 Classifydifferent server types, environments,features, and limitations.

·    Databaseserver

·    Application server

·    Interfaces

·    Physical connections  

·    Server loadand utilization

·    Application services

·    OS and application interoperability

·    Storagespacelimitationsbased on application usageand electronicrecordstorage

3.10 Compareand contrast EHR/EMRtechnologies and how each is implemented.

·    ASP/Cloud vs. client-server (locally-hosted)

·    Browser vs. installed application vs. terminal/remoteaccess

·    Hardware requirements

4.0 MedicalBusinessOperations

4.1Identifycommonlyused medicalterms and devices.

·    Interfaces:

oHL7

oe-prescribing

oCCD

oCCR

oICD10

oCPT

oSnowmed

oNDCID

oPACS

oE/M codes

·    Devices:

oPortablex-raymachine

oMRI

oVitals cuff

oEKG

oEEG

oUltrasound

oPET

oCT

oVascular/Nuclear StressTest

oGlucosemonitor

·    Clinical softwareand modules:

oPatient tracking

oScheduling

oOrderentry

oPracticemanagement

oBilling/coding

oTracking/auditing

·    Basicclinical terms: 

oImaging

oPCP

oStat

oAcuity

oCodeblue/rapid response

oTrauma levels

oControlled substance(levels)

oEHR/EMR

·    Common medical departments:

oInpatient:     

oOutpatient

§    OBGYN

§    ONC

§    PEDS

§    FBC/L&D/Stork/NICU

§    ICU/CCU

§    TCU/PCU

§    MED/SURG

§    BehaviorHealth

§    PACU

§    OR/UR

§    ER

§    OBGYN

§    ONC

§    PEDS

§    Plastic Surgery

§    ENT

§    Respiratory

§    Physicaltherapy

§    Cardiovascular

§    Occupationaltherapy

§    Ambulatory/Daysurgery

§    Radiology

§    Laboratory

§    Ophthalmology

§    Dermatology

§    Nuclear

4.2 Explain aspects of atypical clinical environment.

·    Basic workflow:

oRegistration o Consultation oExamination

·    Clinical processes:

oComputerized physicianorder entry

oTranscription

oDictation

oReferrals/consults

oDigital signatures

4.3Identifyandlabel differentcomponents of medical interfaces.

·    HL7:

oStandard contents

oProvider types

oAL1

oBLG

oIN1

oMSH

oOBR

oPID

oSCH

·    e-prescribing:

oMedication reconciliation

oBedside medication verification

oAllergyinteractions

oFormularychecking

·    Billing:

oEMR/EHR outbound communication

oTypes of codes

oClearinghouse

4.4 Determinecommon interfaceproblemsand escalatewhen necessary.

·    HL7:

oThreads/nodes deactivated

oImproperlyformatted patient demographics

oCommunication link (fax, network, internet)

·    e-prescribing:

oImproperlyformatted patient demographics

oImproperlyformatted script

oDeactivated medication

oControlled substance

oCommunication link (fax, network, internet)

·    Medical devices:

oPower

oNetwork

oI/O

oConfiguration settings

·    Billing:

oImproperlyformatted patient demographics

oImproperlyformatted superbill

oCommunication link (fax, network, internet),

oI/O

oSoftwareconfiguration settings

4.5 Explain the basics ofdocument imaging.

·    Filetypes:

oTIFF oPDF oJPG oGIF

·    Characteristics: oQuality oSize

oResolution

oCompression

·    Scanning and indexing:

oMetadata

oStorageand retrieval

·    OCRand structured data

4.6 Given ascenario, determinecommon clinicalsoftwareproblems.

·    Locate theaffected modules orfields

·    Determinefile/datatypes

·    Escalation procedures toproper support tier

oVendororlocal application support

4.7 Describechangecontrol best practices andits system-wideeffects.

·    Procedural systematiccustomization

·    Governanceboard

·    System patching/updates

·    Appropriate scheduling

·    Changecontrol environments:

oDevelopment

oQA/Test

oUser test

oProduction/live

5.0 Security

5.1 Explain physical securitycontrols.

·    Locations for:

oServers

oNetworkhardware

oPrinters

oScanners

oCopiers

·    Access:

oServers

oOffice

oData closet

oIDF/MDF

oBackups

oKeyfobs

oBadges

oBiometrics

·    Environmental

oHVAC

oSecuritylighting

oSurveillance

oFiresuppression

oPersonnel

oGenerator

·    Officehardware

oLocks

oDoorlocks

oBiometrics

oPrivacyscreens

oUPS

5.2 Summarizethe different encryption types andwhen each is used.

·    Types:

oSSL o DES oAES

o3DES

oPGP

·    Communication:

oEmail

oChat

oSmart phone

oCollaboration sites

oFTP sites

oPhone

oVoIP

oFax

·    Storage:

oFlash drives

oPCs

oLaptops

oSD cards

oExternal drives

oServers

oNAS

oSANS

·    Dissemination of PHI

5.3 Applybest practices when creatingand communicatingpasswords.

·    Communication ofpasswords

·    Storageof passwords

·    Password strength (complexity/length)

·    Password reuse

5.4 Classifypermission levels based onroles.

·    Read

·    Write

·    Modify

·    Fullaccess

5.5Identifydifferent remoteaccess methods and securitycontrols.

·    RDC

·    VPN

·    Remotecontrol applications

·    Terminal emulation

·    L2TP

·    SSH

·    HTTPS

·    SFTP

5.6 Recognizewireless securityprotocols and best practices.

·    WEP

·    WPA

·    WPA2

·    AES

·    RADIUS

·    SSID naming

·    MAC filtering

·    Sitesurveys

·    Access point placement