CHMSP Practice Questions - Certified In HIPAA For Managed Service Provider Exam

An MSP subcontracts cloud backup to a third-party SaaS vendor. Under HIPAA, what is required?

Nothing extra — the MSP's BAA with the covered entity covers the subcontractor The covered entity must sign a separate BAA directly with the subcontractor The MSP must execute a BAA with the subcontractor that is at least as restrictive as the upstream BAA Subcontractors are exempt if they only store encrypted data

Correct Answer:

The MSP must execute a BAA with the subcontractor that is at least as restrictive as the upstream BAA

Access more questions from this quiz

Continue to CHMSP Practice Questions - Certified in HIPAA for Managed Service Provider Exam for more practice questions and the full quiz experience.

Access More Questions