Technical Paper

-Ensuring the security of their workers, carry out a risk assessment and then take action to reduce the chances of those risks arising, for instance monitoring CCTV cameras.

Discuss security standards and methods, including the need for data storage integrity and data backup and recovery. In addition to complying with Health Insurance Portability and Accountability Act (HIPPA), SMC needs to be valiant in how the organization will protect information and manage network security. Information security is the protection of information against risk to its integrity, inadvertent disclosure, or availability (Hawkins, 2013a). The most common threats an organization's network will face are hackers, spyware, viruses, worms, Trojan horses, and malicious insider (Hawkins, 2013a). To protect SMC from hackers, they will use firewalls and intrusion-detection devices. Firewalls protect network systems by obstructing unauthorized entry while allowing approved communications (Hawkins, 2013a). Intrusion-detection systems monitor who the user is and what the user accesses. To promote HIPPA, SMC will track the last names of users who accessed patients with the same last name to reveal inappropriate use of client information.

The departments of a company that are holding personal information are required to have adequate security measures in place. Those include technical measures (such as firewalls) and organisational measures (such as staff training).

The specific purpose of this paper is to describe the authentication process and to describe how this and other information security considerations will affect the design and development process for new information systems.

We also need a more secure software to keep those who are not authorized from accessing the system. One of the ways we can achieve this is by making sure the software that we have is only accessible by the staff from audit department and not our normal hospital employees (Loshin, 2011). The software also needs to be designed that once the data has been retrieved for an audit, it can no longer be changed unless it is approved through the chain of command.

Medical Organizations or Hospitals should manage PHI effectively by implementing policies and procedures. Persuasive training on techniques to appropriately handle and protect PHI should be given to all the employees who handle PHI. This includes access controls, risk management, work-force sanction policies, risk analysis, information system activity reviews, assigned security responsibility, and

Information security and HIPAA policies should cover all the necessary access and control measures needed to secure information system resources and deter, shield and protect the organization from security breaches. The scenario demonstrates that the organizations overall information security posture is poor. The HIPAA, remote access and retention policies within the information management division need to be addressed due to the healthcare organizations legal obligation to ensure the privacy of protected information. Security safeguards can be addressed through vigilance and the implementation logical and administrative access controls. Properly administered HIPAA Privacy and remote access policies would not only help alleviate but quickly identify 3 undocumented accounts with global remote access. HIPAA security standards require any user with access to protected health information have a documented need to

Due in Week Seven: Outline the Access Control Policy. Describe how access control methodologies work to secure information systems

Jean, a former pharmacist, is now the network administrator for the LM Pharmacy in the town of Paris, Virginia. His duties include enabling the electronic transfer of information between health care providers (i.e., doctors and hospitals), patients, and the pharmacy itself. One of Jean’s most important responsibilities is to protect health information in accordance with federal law and the pharmacy’s privacy policy.

     When watching college athletes participating in their sports, does it ever cross one’s mind that the athletes getting paid? “The NCAA establishes rules and regulations for universities to follow and one of the most important rules is that student athletes should not receive any money with the exception of scholarships towards their tuition and housing” (Winn). In 1999, the Chronicle of Higher Education surveyed atheletes’ statistics on “graduation rates for scholarship college athletes in the NCAA’s top Division I.” Fifty-one percent of football players and 41 percent of male basketball players graduated in six years (Meggyesy). NCAA Chief Operating Officer Dan Boggan stated; “before the eligibility

Physical safeguards is the implementation of policies and procedures to limit physical access to its electronic information systems and the facility or facilities in which they are housed, while ensuring that properly authorized access is allowed which Disposal and Media Re-Use, areas mandatory to be addressed. Technical safeguards includes the implementation of policies and procedures for electronic information systems that maintain electronic protected health information to allow access only to those persons or software programs that have been granted access rights. Requirements include: Unique user identification, Emergency Access Procedures amongst other recommended areas for compliance. I would seek and review these policies to ensure the organization is being compliant. Noncompliance in this area could be detrimental for both the organization and for the patients serviced. If PHI is breached at the organization and there is no established procedure that would ensure corrective action immediately, HHS could impose hefty fines, patients may be notified and could file complaints as well.

At Wyoming Medical Center in Casper, Wyoming, the balance between system security and allowing staff the access they need to do their job is a tricky situation. The large number of employees and computers inspired the medical center to use a security classification system depending on the area in which devices are used and the job duty of the user. The computers are placed in categories like computers used in hallways by staff, computers moved from room to room used by nurses, and computers used in offices. Wyoming Medical Center is on the right track by understanding security must be appropriate for the user’s job to be done correctly.

There are differing sorts of cameras available, this range from the wide-dynamic range cameras to the changeover models. On account of pharmacies, the installers, with requests from the security officer, ought to deliberately introduce cameras. The establishment should be planned in a way that will accomplish an ideal recovery. Best security is received by acquiring proper camera models, which have the correct focal points and mounts. The camera determination ought to be set well for better evaluation of the premises

Information security and privacy is occupying a most important role in the healthcare territory in order to deliver protected information process to their patients (Appari, & Johnson, 2010). As healthcare department is the organization with vast data and essential information the hospitals has to keep a useful information security technique in their enterprise process (Mishra et al., 2011). Information security is one such phase in the healthcare sphere which is extremely problematic to describe and evaluate even to the individuals who are working on the process. In the healthcare organization, information is of many types which required for the work and even the security is a main control for almost all the practices which are transmitted out in the healthcare field (Appari, & Johnson, 2010). Hospitals, in specific, have been instructed to create a new set of security specialists to protect healthcare data tools techniques upon which exists may rely. Healthcare data is very critical for patients because it is very confidential records. If a medical apparatus is filled with a computer virus it can even exemplify a possibility to patients ' lives. Hence, hospitals should design alertness of the risk, to defend against concerns to healthcare databanks and be concerned about the high risk of infected computers or medical tools being connected to their networks (Mishra et al., 2011).

Database security is vital for any and every organization which uses databases. Without proper security, the databases can be breached and the breaches can lead to confidential information being released. This has happened to many organizations whether they are large or small; for example, in the past few years Target and Sony both fell victim to database breaches. To make matters worse both Target and Sony were actually warned about the flaws in their security, but neither took any action to resolve the flaws. Looking into these breaches and how they were handled could lead to designing better databases. Organizations should also look within themselves to assure all employees know good security practices. Simply following regular procedures such as installing antivirus software and firewalls can help create more secure databases. An organization should look at all of their databases to ensure the same top level security is established for all of their databases.