An EHR application must have access-review control tests run every three months. What frequency setting should the compliance admin configure on the control?
Select an answer to reveal the explanation.
Short Explanation
Quarterly means the calendar—not a sticky note that says “maybe next month.” Put quarterly on the EHR access-review controls so tests open on schedule. Hoping people skip cycles, waiting for auditors, or forcing annual-plus-exceptions is how reviews go stale.
Full Explanation
Control test frequency drives when compliance tests are due for a control on an entity. Configuring quarterly frequency for EHR access-review controls aligns scheduled testing with the intended cadence. Monthly schedules that depend on informal skips create inconsistent evidence and overdue noise. Disabling schedules or stretching to annual with mid-year exceptions weakens continuous compliance monitoring for clinical systems.