Instructions:
There are 2 parts to this Assignment. Each one will help you better understand how security breaches are handled and give you the opportunity to create a security plan. Creating this security plan will help you understand what is needed to protect data.
Requirements: The Assignment should be 3 to4 pages in length, prepared in a Microsoft Word document, and APA-formatted.
Include a title page and reference page. Length requirements do not include the title page, and the reference page.
Follow APA style format and citation guidelines, including Times New Roman 12 point font and double spacing.
Part I
1. Search the internet for news about security breaches in healthcare and other industries in the last three years. Suggested source for the latest breach information from the Office of Civil Rights:
Source: HIPAA Privacy, Security, and Breach Notification Audit Program: United States Department of Health & Human Services. Retrieved from https://www.hhs.gov/ocr/privacy/hipaa/enforcement/audit/index.html
2. Write a critical essay summarizing the two cases. In your summary, identify the principal threats in each of these cases and what could have been done to minimize these threats.
Part II
Using what you learned from Part I, create a security plan for a medium sized health care facility. In your security plan, evaluate how you would approach security threats from both inside and outside the organization. Be sure that you address the following items in your security plan: Physical and administrative safeguards: employee education, health information archival and retrieval systems, disaster recovery, storage media.
A. Access safeguards: authentication, password management.
B. Network safeguards: cloud computing, mobile devices to deliver health care, firewalls,Encryption / decryption.
C. Security threats of mobile devices used in health care delivery.
D. Critique the plan you have written, identifying its strengths, elements that were not covered in the text, and any additional comissions or weaknesses of the plan.