Problem:
Lower Hills Hospital plans to install a database management system (HospInfo) that will maintain patient histories including tests performed, test results, vital statistics, and medical diagnoses. The system also will manage personnel and payroll, medical and non-medical supplies, and patient and provincial health care billings.
The decision was made by the hospital board on the advice of a consultant who is a former employee of Medical Data Services Inc., the developer of HospInfo.
Lower Hills Hospital's chief information officer has come to your accounting firm to ask for advise on what general controls she should ask Medical Data Services Inc. to install to preserve the integrity of the information in the system and to deal with privacy issues. The system would permit data about patients to be entered by doctors, nurses, and medical technologists.
Required:
Q1. Describe in general terms the controls you would suggest for the system as a whole.
Q2. Considering the nature of Lower Hills Hospital, describe potential risks the hospital should be concerned about with respect to HospInfo.
Q3. Describe the advantages of such a database management system