A routine audit of an electronic health record (EHR) system

Introduction _____________________________________

As an information security professional, you are responsible for ensuring preventive information security controls are in place. Such controls include implementing organizational and security policies, processes, and other forms of preventive security measures. Given the information in the scenario below, you have been asked to create employee policies for the company and ensure the policies comply with the minimum requirements of the national or international standards in these areas. These policies will be published to the entire organization in the employee handbook or the HR portal.

Scenario ________________________________________

During a routine audit of an electronic health record (EHR) system, a major healthcare provider discovered three undocumented accounts that appeared to have access to the entire clinical and financial health record within the system. Further investigation revealed that these accounts were accessing records around the clock via remote access to the healthcare system’s network. Three remote access accounts appeared to have been set up at least six months prior to the creation date of the first account in the EHR. Additionally, the accounts in the EHR were originally established as standard user accounts approximately two months ago and escalated to full access over the course of two weeks. System controls are verified to be in effect that limit access for each account to no more than 300 records per day. Over the course of the past two months it is estimated that more than 37,000 but no more than 50,000 records could have been accessed. Reports are being run to determine which patient accounts were accessed, but the reports will take more than two weeks to identify the record identification numbers and then take longer than 60 days to compile the usernames and addresses. An audit of other systems that contain sensitive information revealed no other unauthorized access. Audit files that would normally identify the creator of the accounts overwrite themselves after two weeks in the systems that provide remote access and the EHR. No one in senior management has any reason to suspect that it was an inside job, but based on the short duration for log retention, there is no way to eliminate that possibility either.

Requirements ________________________________________

Your submission must be your original work. No more than a combined total of 30% of the submission and no more than a 10% match to any one individual source can be directly quoted or closely paraphrased from sources, even if cited correctly. An originality report is provided when you submit your task that can be used as a guide. You must use the rubric to direct the creation of your submission because it provides detailed criteria that will be used to evaluate your work. Each requirement below may be evaluated by more than one rubric aspect. The rubric aspect titles may contain hyperlinks to relevant portions of the course. A. Describe three of the security faults in this scenario that caused a security breach. B. After researching the national and international standards, create three policy statements that apply to the entire organization, comply with a national or international standard, and might have prevented the security breaches identified in part A. 1. Justify how each organizational policy statement in part B complies with a specific nationally or internationally recognized standard (e.g., HIPAA, HiTech, PCI-DSS, ISO/IEC, NIST) and could plausibly be enforced at the company. Note: The policy statements should match the baseline requirements of the standards for organizational compliance. C. Acknowledge sources, using in-text citations and references, for content that is quoted, paraphrased, or summarized. Rubric

#routine #audit #electronic #health #record #EHR #system

Share This Post

Email
WhatsApp
Facebook
Twitter
LinkedIn
Pinterest
Reddit

Order a Similar Paper and get 15% Discount on your First Order

Related Questions

This week we turn our attention to annotations. Annotation is

 This week we turn our attention to annotations.  Annotation is a crucial component of good data visualization.  It can turn a boring graphic into an interesting and insightful way to convey information., please navigate to any site and find a graphic that could use some annotation work.  Add the graphic

A. Read, watch, or review the resources on the Problem

 A.  Read, watch, or review the resources on the Problem Overview(new tab) page as well as the following resources: An outlook is a summary of the major trends and a projection of those trends into the near future. You can think of it as analogous to a stock analyst’s report that

Similarity less 10 % all questions must be answered to

Similarity less 10 %     all questions must be answered to receive full credit for this discussion  Discuss the role that the electoral process and government plays in one’s daily work and family life. As nurses, health policy can influence both arenas of our lives. What policy issues might drive

MN3345 Strategic Management Accounting

Write a report to the Board of Directors at Coffee Gurus Ltd that provides an assessment of the current strategic performance management within Coffee Gurus Ltd and its divisions and the planned changes proposed as detailed in the ‘Required’ of the case study. • This is a management consulting report

o51 2 replies 150 words each Apa format scholarly reference

o51  2 replies 150 words each Apa format scholarly reference for both   Student 1 reply  Given the technical information related to Test A and Test B, I would choose to use Test A. One characteristic of Test B that made it appealing was the increased length of the test.

Impacts of Leadership/Role of Partnerships SLP

The SLP for this course is based on a manufacturing company of your choice. The facility employs at least 75 workers. You are the Environmental and Occupational Health and Safety Manager for this company. Your task is to develop aspects of a health and safety program that addresses worker injury

For this assignment, you are to watch the two brief

  For this assignment, you are to watch the two brief but thought-provoking videos in this course module.  Then, you are to reflect on your experience and respond to the following prompts. Please, include the question prompt and its number accordingly.  Video #1: Cracking the Codes: Unconscious Bias  https://www.youtube.com/watch?v=F05HaArLV44 Describe unconscious

Psychiatric Mental Health Nurse Practitioner

 (1) Your resume or typewritten outline, describing at least the past five years of your employment history and significant community, professional, or college extracurricular activities. Please include recognitions of achievements you have received (e.g., licenses, publications, and awards). (2) A typewritten essay, not to exceed 750 words, that responds to

of the leading causes of the American Revolution. The Stamp

 of the leading causes of the American Revolution.    The Stamp Act The Boston Massacre   Analyze the cause and effect of two acts passed by the British Parliament on British North America. Which of your two selections do you consider the most significant and why? Examine and explain the

In the video, you see (a) junior staff who communicates

In the video, you see (a) junior staff who communicates with the client, (b) the client – Margo, (c) partner, (d) audit senior (who is sitting next to the junior staff). Pick one person you either connect with the most or aspire to be in your career. Explain why you picked

1.Your community is at risk for a specific type of natural disaster (e.g., tornado, flood, hurricane, earthquake). Use Nightingale’s principles and observations to develop an emergency plan for one of Nursing Assignment Help

1.Your community is at risk for a specific type of natural disaster (e.g., tornado, flood, hurricane, earthquake). Use Nightingale’s principles and observations to develop an emergency plan for one of these events. Outline the items you would include in the plan. 2.Using Nightingale’s concepts ofventilation, light, noise,andcleanliness,analyze the setting in

Instructions Using any slide share or movie making software, you

Instructions Using any slide share or movie making software, you can utilize information gathered throughout the course to create a visual travel log. This multi-media presentation will include images, video, and voice over dialogue consisting of a mix of research and original content that demonstrates your analysis of course concepts.

DQ1

Discuss how evidence-based practice is defined as translational research. Describe the framework that supports that definition. Identify a population health issue you are interested in researching and discuss the issue using that framework. As you select an issue, remember you will be building upon your research in this course for

Fifty-four-year-old Fred is complaining of a headache that started about

  Fifty-four-year-old Fred is complaining of a headache that started about 2 weeks ago. For the past 2 days, the headache has increased in severity, and he is photophobic and has uncial rigidity and projectile vomiting. CT scan results show an arteriovenous malformation in the basal artery and a small

Written Exercise Explain this quote from Adam Smith: “It is

Premium Paper Help is a professional writing service that provides original papers. Our products include academic papers of varying complexity and other personalized services, along with research materials for assistance purposes only. All the materials from our website should be used with proper references.

Assignment: Students will be assigned a body region. Each student

Assignment:  Students will be assigned a body region. Each student will then be responsible for choosing one article from a peer reviewed journal using the virtual library in relation to applied anatomy and kinesiology for the assigned body region. Students must have the article approved by the instructor prior to

An 8-year-old girl comes to your ambulatory care clinic with

  An 8-year-old girl comes to your ambulatory care clinic with complaints of left ear pain for the past 3 days. She had respiratory infection a week ago. On physical examination, the tympanic membrane is bulging. What else should you ask the client? What teaching would you reinforce to prevent