Which of the following is NOT typically listed as an Administrative Safeguard type?

• A. Security management process
• B. Workforce security
• C. Contingency planning
• D. Medication error reporting

Answer: (D)

Administrative Safeguards are the policies and procedures that govern how the workforce protects and handles electronic protected health information (ePHI). The safeguards include the security management process, which covers risk analysis and risk management to prevent security violations; workforce security, which includes measures like personnel screening and access termination to ensure only authorized individuals handle ePHI; and contingency planning, which prepares for data backup, disaster recovery, and emergency situations to maintain access to ePHI.

Medication error reporting, on the other hand, is focused on clinical safety and quality improvement rather than safeguarding information systems or managing access to ePHI. It isn’t listed as a standard Administrative Safeguard type.