Which safeguard category in HIPAA addresses administrative policies and workforce training?

• A. Technical safeguards
• B. Physical safeguards
• C. Administrative safeguards
• D. Confidential safeguards

Answer: (C)

This item tests how HIPAA organizes security requirements by category. Administrative safeguards are all about the governance side—the policies, procedures, and people-focused actions that protect ePHI. They explicitly include administrative policies and workforce training, along with other management activities like risk analysis, security management processes, and incident response. Technical safeguards deal with the tools and technologies used to protect data (such as access controls and encryption), while physical safeguards cover the physical environment and facility protections. There isn’t a HIPAA category called “confidential safeguards.”