Nt1330 Unit 1

The mail server is like an computerized mail man that capable to delievers or handles e-mails across a internet or network. It can deliver e-mails from client computer to other mail servers or client computers. The client computer are the computer that you use to read or send mails across the networks. The example would be your computer at school or home. Furthermore, Smartphone or other mobile devices that have e-mail capbilities also can categorize as a client computers. The mail server uses Simple Mail Transfer Protocol(SMTP) for mail server to send email. SMTP is an application protocol that uses to store and forward emails. It will transfer your emails across the network and mail server will uses Post Office Protocol Version 3 (POP3) or Internet Message Access Protcol Version 4(IMAP) to receive the emails at the reciving ends.

The high level requirements for the network are to: measure and record sensor data and process data to actuate the environment. Given these requirements, this section will discuss how these requirements were met as well as provide some system metrics.

Design and implementation of this project is divided into two parts: 
i) Penetration testing of real-world applications using variety of tools available. 
ii) Secure coding guideline for iOS developers as a counter measure to possible threats which includes development of jailbreak detection application.

Another downfall or disadvantage of using this software is the concerns of client’s security. Most individuals think a disadvantage would be the security vulnerability for the client’s medical records. The ultimate concern is that hackers are still out there and may steal client’s personal information and possible compromise their identity. It does not matter how many password encryptions, security features added, and firewalls are put up, hackers can get in there. However, there are also companies that specialize in security measures for the maintenance of Electronic Health Records software.

Today, the patient will visit the same doctor and the doctor will enter the data into a tablet or pc. The EHR is a designed very similar to the paper chart, but is programmed to collect and segregate the information in different formats to transmit securely to the necessary partners. Those partners include insurance carriers, public health entities, clearinghouses, laboratories, and pharmacist. This data is collected and stored on secure servers. In most EHR’s today, a doctor who has a private practice, and maybe affiliated with a hospital has the ability to allow the hospital to access a patient’s record, if that patient has agreed to release their information to the hospitals. So if the patient is taken to the local hospital, the hospital can have access to the patient’s records if an authorization is in place. The EHR will not only collect the patient medical information, it will track the medical information. Providers are required to secure the information and track the medical records activity via a built-in audit system that will show the medical records history and the name of all parties that access the patient’s records. Poor EHR system design and improper use can cause EHR-related errors that jeopardize the integrity of the information in the EHR, leading to errors that endanger patient safety or decrease the quality of care. These unintended consequences also may increase fraud and abuse and can have

Systemic literature review, Security and Privacy in electronic health records, selected 49 articles, but they approved only 26 that were using standards related to the privacy and security of EHR. The protection and security of personal information is critical in the health sector and there are three fundamental security goals, Confidentiality, integrity and availability (CIA). According to the ISO EN13606 standard, confidentiality refers to the ‘‘process that ensures that information is accessible only to those authorized to have access to it’’. (Fernandez - Aleman, 2013)Integrity refers to the duty to ensure that information is accurate and is not modified in an unauthorized fashion. The integrity of health information must therefore be protected to ensure patient safety, and one important component of this protection is that of ensuring that the information’s entire life cycle is fully auditable. Availability refers to the ‘‘property of being accessible and useable upon demand by an authorized entity’’. (Fernandez - Aleman, 2013)

The times of entering and storing health care records in file cabinets is quickly changing due to the electronic age. Electronic Health Records (EHR) are becoming increasingly popular especially since there have been many legislative attempts to encourage the use of health information technology systems. With the potential benefits that come with EHR’s, potential risks are also associated with this technology. The main concern is that of maintaining data security and if current law establishes enough security guidelines. Though security is a major risk of EHR’s many ideas have been proposed in order to help alleviate the potential threats. This topic is beneficial to the profession of nursing because as nurses it is also our responsibility to ensure that these systems are secure in order to maintain the integrity of our patient’s health information.

Patient privacy is a serious concern for healthcare organizations. Protecting the confidentiality, integrity, and availability of patient information is a major undertaking. Since the enactment of the ARRA-HITECH Act, the confidentiality of patients has been a leading concern for healthcare organizations. Healthcare providers are under pressure to secure access to clinical applications and protect the underlying information technology (IT) infrastructure from misuse by insiders, hackers, and identity thieves (McAfee, 2011). The Health Insurance Portability and Accountability Act (HIPAA) protects the privacy of an individual’s health information and governs the way healthcare providers manage and disclose protected health information (PHI). To comply with the ARRA-HITECH, healthcare providers must introduce appropriate systems and practices to comply with HIPAA. In particular, the act introduces new regulations governing the confidentiality of EHRs.

One of the biggest issue with EHR is that patient data can be accessed by unauthorized users. If that information fell in the wrong hands, a patient can become a victim of identity theft. To resolve the issue, healthcare organizations should first train their employees on HIPAA and the consequences for not following it. Then, they should give a different password to each authorized user to known who access the patient’s file. Finally, they should make sure their computer has a security system to detect and stop a

The medical field is moving to another level when it comes to technology, with the implementation of Electronic Health Records, also known by the acronym, EHR. The new system that allows medical records to be maintained electronically, by the internet is making waves. The government has even put incentive programs into place, as extra encouragement to providers. The adaptation to Electronic Health Records has been anything but smooth, as many medical practices have been reluctant and some just afraid to try something new. Concerns will continue to arise until the medical world has an understanding of the privacy and security rules that follow the new technology. Electronic Health Records has and will continue to prove itself as an asset, a convenience, efficient, helpful, and more, as some will continue to shy away from the change. Electronic Health Records will prove that it is “meaningful”, falling under the category of “meaningful use.”

Although the recent advancements in technology and electronic medical record documentation are associated with improved quality of patient care, the potential for compromised security is at an all time high. As and methods of retrieval and means of access to medical records increases, emphasis must be placed on the importance of patient privacy and user accountability.

Taking into consideration the different security concerns exposed above as lessons learned, our team made numerous recommendations for safeguarding the patients’ data integrity, confidentiality, and privacy. It is important to point out that not only access management and host-based security measures are needed, but also network and physical access need to be hardened.

New technologies are changing the healthcare by incorporating into the existing infrastructure. Paper-based patient records are converting to electronic format, from this patients can get an access to their record. Even by placing a specialized sensor in patients home make monitoring patient much more feasible. Overall this technology makes an improvement on the quality of healthcare. Which also reduce medical errors and healthcare cost. While there are so many advantages of the technology, related privacy and security matters need to be evaluated to make these systems generally acceptable. How an organization protects and gather data is data privacy. Which is basically more about what information is collected and how it is using and transferring. When it comes to healthcare, it becomes much more challenging. Healthcare data such as electronic medical records, medical imaging and healthcare system protecting the privacy of patients’ personal data and securing the IT infrastructure become challenging. Accessing patients’ data is one of the major security threat for the healthcare organizations. Emerging trends of healthcare privacy and security, heightened enforcement and increased forfeits have increased to address the security risk. According to ITRC Breach Report by the Identity Theft Resource Center, in the first three months of 2013 alone,

Patients can retrieve their health records via patient portals, personal health records, and personally controlled health records. Each serves a role in assisting the patient maintaining and sustaining their good health. Firstly, portals serve as access points for patients to view their clinical record online. This is conducted via a secure, hospital and health care facilities’ website which is linked to the patient’s electronic health records (EHRs) at any time (Johnson, Jimison, & Mandl, 2014). EHR vendors provide this portal functionality. The health care facility controls the medical information in the patron’s EHR. Access to these portals is attained by utilizing a secure username and password. Thus, patients can view health information such as doctor visits, discharge summaries, medications, immunizations, allergies, and lab results (HHS.gov, 2015). Furthermore, portals provide the ability for patients to collaborate with their physicians and clinicians via secure messages, request prescription refills, schedule appointments, examine benefits and coverage, revise contact information, pay for services rendered, download and complete forms, and peruse educational materials (HHS.gov, 2015; Johnson et al., 2014). According to HHS.gov (2015), “With patient portal implementation, your organization can enhance patient-provider communication, empower patients, support care between visits, and, most importantly improve patient outcomes”.

Information technology provides many benefits to health industry. By giving accurate information more readily available to providers, payers, researchers, administrators, and patients, advanced computing and communications technology helps to improve the quality and lower the costs of health care. On the other hand, the prospect of storing health information in electronic form raises concerns about patient privacy and data security, even though the information technology allows the use of advanced technical mechanisms to limit access to health information, it also can cause new vulnerabilities. Information technology facilitates both the storage of large amounts of electronic information in a small physical space and the dissemination of this information. It also enables the creation and analysis of large databases that contain information from various sources.