Information Technology
Scope
Health information technology questions cover the systems a coder touches and the controls that protect them. Know the functions of the electronic health record, the master patient index (the MPI is the identity backbone - duplicates and overlays cause merged records and misattributed data), the encoder and grouper, computer-assisted coding and natural language processing, clinical documentation improvement tools, registries, and interfaces that exchange data using standards such as HL7. Understand the role of standardized vocabularies: ICD-10-CM/PCS for codes, CPT and HCPCS for procedures and supplies, SNOMED CT for clinical concepts, and LOINC for laboratory observations.
Security content includes unique user identification, role-based access, strong authentication, audit trails and log monitoring, encryption in transit and at rest, automatic logoff, facility access controls, and contingency planning - data backup, disaster recovery, and downtime procedures. Data quality concepts (completeness, accuracy, timeliness, consistency) and release-of-information tracking systems also appear.
Traps
A security breach is not the same as a privacy breach; audit trails detect inappropriate access but do not prevent it. Do not assume a scanned document, an image, or a patient portal entry is the legal record without the organization’s defined rules. “Computer-assisted coding assigns codes automatically” is a distractor - the coder remains accountable for validity.
Worked example
Two records for “Robert J. Smith” share a birth date and show the same encounter numbers. The HIM analyst should treat this as an MPI duplicate, investigate, and merge only after verification - never guess based on name similarity alone.
Rule of thumb
Identify the system’s function first (capture, code, group, exchange, protect), then the control that keeps its data trustworthy.