C
Cabulance
A taxi cab that also functions as an ambulance.
CBO
Congressional Budget Office or Cost Budget Office.
CEN
European Center for Standardization, or Comite Europeen de Normalisation.
Center for Healthcare Information Management (CHIM)
A health information technology industry association.
Centers for Disease Control and Prevention (CDC)
A healthcare organization that maintains several code sets included in the HIPAA standards, including the ICD-9-CM codes.
Central Office
The telephone switching facility that interconnects subscribers' telephone lines to each other and to intra- and inter-city trunk lines.
CFR or C.F.R.
Code of Federal Regulations.
Chain of Trust (COT)
A term used in the HIPAA Security NPRM for a pattern of agreements that extend protection of health care data by requiring that each covered entity that shares health care data with another entity require that that entity provide protections comparable to those provided by the covered entity, and that that entity, in turn, require that any other entities with which it shares the data satisfy the same requirements.
Chain of Trust Agreement
describes the type of contract that would be needed to extend the responsibility to protect health care data across a series of contractual relationships.
CHAMPUS
Civilian Health and Medical Program of the Uniformed Sendees.
CHIP
Child Health Insurance Program.
Claim Adjustment Reason Codes
A national administrative code set that identifies the reasons for any differences, or adjustments, between the original provider charge for a claim or service and the payer's payment for it. This code set is used in the X12 835 Claim Payment & Remittance Advice and the X12 837 Claim transactions, and is maintained by the Health Care Code Maintenance Committee.
Claim Attachment
Any of a variety of hardcopy forms or electronic records needed to process a claim in addition to the claim itself.
Claim Status Category Codes
A national administrative code set that indicates the general category of the status of health care claims. This code set is used in the X12 277 Claim Status Notification transaction, and is maintained by the Health Care Code Maintenance Committee.
Claim Status Codes
A national administrative code set that identifies the status of health care claims. This code set is used in the X12 277 Claim Status Notification transaction, and is maintained by the Health Care Code Maintenance Committee.
CLIA
Clinical Laboratory Improvement Amendments.
Clinical or Medical Code Sets
identify medical conditions and the procedures, services, equipment, and supplies used to deal with them. Non-clinical or non-medical or administrative code sets identify or characterize entities and events in a manner that facilitates an administrative process.
Code Set Maintaining Healthcare organization
Under HIPAA, this is a healthcare organization that creates and maintains the code sets adopted by the Secretary for use in the transactions for which standards are adopted.
Code Set
Under HIPAA, this is any set of codes used to encode data elements, such as tables of terms, medical concepts, medical diagnostic codes, or medical procedure codes. This includes both the codes and their descriptions.
Cold-site
A cold-site (also referred to as a shell site) is a site where the computer environment is maintained without any equipment; it is a computer room without the computer. Cold-sites are commercially available or may be maintained by the healthcare organization itself. The major task involved in the use of a cold-site is the location, purchase, transportation, and installation of replacement hardware. Also involved is the installation of electrical, communications, and environmental related work. Any services required to prepare a cold-site (i.e., electrical contractors, network professionals) should be pre-arranged and documented in the BCP.
College of Healthcare Information Management Executives (CHIME)
A professional healthcare organization for health care Chief Information Officers (CIOs).
Comment
Public commentary on the merits or appropriateness of proposed or potential regulations provided in response to an NPRM, an NOI, or other federal regulatory notice.
Compliance Date
Under HIPAA, this is the date by which a covered entity must comply with a standard, an implementation specification, or a modification. This is usually 24 months after the effective data of the associated final rule for most entities, but 36 months after the effective data for small health plans. For future changes in the standards, the compliance date would be at least 180 days after the effective data, but can be longer for small health plans and for complex changes.
Component Testing
Are actual physical exercises designed to assess the readiness and effectiveness of discreet plan elements and recovery activities. The isolation of key recovery activities allows team members to focus their efforts while limiting testing expense and resources. This methodology is effective for identifying and resolving issues that may adversely affect the successful completion of a full operations test. Component tests include: Evacuation tests, Emergency Notification Tests, Application recovery tests, remote or dial-in tests, critical business function recovery tests, etc.
Computer-based Patient Record Institute (CPRI) - Healthcare Open Systems and Trials (HOST)
An industry healthcare organization that promotes the use of healthcare information systems, including electronic healthcare records.
Consortium Agreement
An agreement made by a group of healthcare organizations to share processing facilities and/or office facilities, if one member of the group suffers a disaster. SIMILAR TERMS: Reciprocal Agreement.
Controls
Measures designed to reduce or eliminate threats.
Coordination of Benefits (COB)
A process for determining the respective responsibilities of two or more health plans that have some financial responsibility for a medical claim. Also called cross-over.
CORF
Comprehensive Outpatient Rehabilitation Facility.
Correlation of Incident Detection
Event logs, historical incident results and network mapping information need to be correlated to assess the validity of an incident, its source and its potential impact on business operations. It may also be necessary to analyze whether it is a single large-scale attack or a set of unrelated attacks at the same time.
Covered Entity (CE)
Under HIPAA, this is a health plan, a health care clearinghouse, or a health care provider who transmits any health information in electronic form in connection with a HIPAA transaction.
Covered Function
Functions that make an entity a health plan, a health care provider, or a health care clearinghouse.
Crisis Management
The overall coordination of a healthcare organization's response to a crisis, in an effective, timely manner, with the goal of avoiding or minimizing damage to the healthcare organization's profitability, reputation, or ability to operate.
Critical Business Function
A logical group of business processes which consist of procedures and/or tasks having the end goal of meeting a business need and that would have a significant impact on the healthcare organization if not performed. The impact is usually measured quantitatively (cost per hour/day/week that not processing that function would cost the business unit) and/or qualitatively (the business reason why that function is necessary to the survival of the healthcare organization) as part of the business impact analysis.
Current Dental Terminology (CDT)
A medical code set, maintained and copyrighted by the ADA, that has been selected for use in the HIPAA transactions.
Current Procedural Terminology (CPT)
A medical code set, maintained and copyrighted by the AMA, that has been selected for use under HIPAA for non-institutional and non-dental professional transactions.