Kaplan University School of Health Sciences HI300 Assignment Directions
Unit 7 Assignment
Unit outcomes addressed in this Assignment:
? Contrast the difference between the terms confidentiality, privacy, and security.
? Identify the greatest threats to the security of health information.
? Describe the primary components of the security provision of the Health insurance Portability and Accountability Act and extensions by HITECH ACT.
? Summarize the roles and responsibilities of the health information technician.
Course outcome(s) assessed/addressed in this Assignment:
HI300-4: Formulate a secure storage and retrieval process for healthcare data.
GEL 1.1: Demonstrate college-level communication through the composition of original materials in Standard American English.
Instructions:
There are two parts to this Assignment. Each one will help you better understand how security breaches are handled and give you the opportunity to create a security plan. Creating this security plan will help you understand what is needed to protect data.
Part I
1. Search the internet for news about security breaches in healthcare and other industries in the last three years. Suggested source for the latest breach information from the Office of Civil Rights:
Source: HIPAA Privacy, Security, and Breach Notification Audit Program: United States Department of Health & Human Services. Retrieved from http://www.hhs.gov/ocr/privacy/hipaa/enforcement/audit/index.html
2. Write a critical essay summarizing the two cases. In your summary, identify the principal threats in each of these cases and what could have been done to minimize these threats.
Part II
1. Using what you learned from Part I, create a security plan for a medium sized health care facility. In your security plan, evaluate how you would approach security threats from both inside and outside the organization. Be sure that you address the following items in your security plan:
a. physical and administrative safeguards: employee education, health information archival and retrieval systems, disaster recovery, storage media
b. access safeguards: authentication, password management
c. network safeguards: cloud computing, mobile devices to deliver health care, firewalls, encryption / decryption
d. security threats of mobile devices used in health care delivery
Kaplan University School of Health Sciences HI300 Assignment Directions
2. Critique the plan you have written, identifying its strengths, elements that were not covered in the text, and any additional omissions or weaknesses of the plan.
Requirements:
? The Assignment should be three to four pages in length, prepared in a Microsoft Word document, and APA-formatted.
? Include a title page and reference page. Length requirements do not include the title page, and the reference page.
? Follow APA style format and citation guidelines, including Times New Roman 12 point font and double spacing.
? This Assignment should follow the conventions of Standard American English featuring correct grammar, punctuation, style, and mechanics.
? Include at least four references. The course textbook counts as one reference. All sources must be scholarly. Wikipedia is not acceptable. Use APA style for all citations including course materials.
? Your writing should be well ordered, logical, and unified, as well as original and insightful.
? For additional support utilize the GEL 1.1 Universal Writing Rubric in Doc Sharing, the Writing Center and review Writing Center Resources in Doc Sharing. The Writing Center provides guidelines for writing essays and comparing and contrasting.
Submitting your work:
Submit your Assignment to the appropriate Dropbox. For instructions on submitting your work, view the Dropbox Guide located under Academic Tools at the top of your unit page.
Please be sure to download the file “Writing Center Resources” from Doc Sharing to assist you with meeting APA expectations for written Assignments.
Kaplan University School of Health Sciences HI300 Assignment Directions
Unit 7 Assignment Grading Rubric = 90 points
Assignment Requirements
Points possible
Points earned by student
Includes summary for two cases from the OCR website or Internet
0–25
Identifies principal threats in each of the cases
0–10
Identifies what could have been done to prevent the security breach in each case
0–10
Develops security plan for medium sized organization addressing the various safeguards mentioned in the directions
0–30
Discusses security threats of mobile devices in health care delivery
0-10
Critiques plan and identifies its strengths and/or weakness
0-5
Total (Sum of all points)
Points deducted for spelling, grammar, and/or APA errors. (See Writing Deductions Rubric in Doc Sharing)
Adjusted total points
Instructor Feedback:

Kaplan University School of Health Sciences HI300 Assignment Directions
Unit 7 Assignment
Unit outcomes addressed in this Assignment:
? Contrast the difference between the terms confidentiality, privacy, and security.
? Identify the greatest threats to the security of health information.
? Describe the primary components of the security provision of the Health insurance Portability and Accountability Act and extensions by HITECH ACT.
? Summarize the roles and responsibilities of the health information technician.
Course outcome(s) assessed/addressed in this Assignment:
HI300-4: Formulate a secure storage and retrieval process for healthcare data.
GEL 1.1: Demonstrate college-level communication through the composition of original materials in Standard American English.
Instructions:
There are two parts to this Assignment. Each one will help you better understand how security breaches are handled and give you the opportunity to create a security plan. Creating this security plan will help you understand what is needed to protect data.
Part I
1. Search the internet for news about security breaches in healthcare and other industries in the last three years. Suggested source for the latest breach information from the Office of Civil Rights:
Source: HIPAA Privacy, Security, and Breach Notification Audit Program: United States Department of Health & Human Services. Retrieved from http://www.hhs.gov/ocr/privacy/hipaa/enforcement/audit/index.html
2. Write a critical essay summarizing the two cases. In your summary, identify the principal threats in each of these cases and what could have been done to minimize these threats.
Part II
1. Using what you learned from Part I, create a security plan for a medium sized health care facility. In your security plan, evaluate how you would approach security threats from both inside and outside the organization. Be sure that you address the following items in your security plan:
a. physical and administrative safeguards: employee education, health information archival and retrieval systems, disaster recovery, storage media
b. access safeguards: authentication, password management
c. network safeguards: cloud computing, mobile devices to deliver health care, firewalls, encryption / decryption
d. security threats of mobile devices used in health care delivery
Kaplan University School of Health Sciences HI300 Assignment Directions
2. Critique the plan you have written, identifying its strengths, elements that were not covered in the text, and any additional omissions or weaknesses of the plan.
Requirements:
? The Assignment should be three to four pages in length, prepared in a Microsoft Word document, and APA-formatted.
? Include a title page and reference page. Length requirements do not include the title page, and the reference page.
? Follow APA style format and citation guidelines, including Times New Roman 12 point font and double spacing.
? This Assignment should follow the conventions of Standard American English featuring correct grammar, punctuation, style, and mechanics.
? Include at least four references. The course textbook counts as one reference. All sources must be scholarly. Wikipedia is not acceptable. Use APA style for all citations including course materials.
? Your writing should be well ordered, logical, and unified, as well as original and insightful.
? For additional support utilize the GEL 1.1 Universal Writing Rubric in Doc Sharing, the Writing Center and review Writing Center Resources in Doc Sharing. The Writing Center provides guidelines for writing essays and comparing and contrasting.
Submitting your work:
Submit your Assignment to the appropriate Dropbox. For instructions on submitting your work, view the Dropbox Guide located under Academic Tools at the top of your unit page.
Please be sure to download the file “Writing Center Resources” from Doc Sharing to assist you with meeting APA expectations for written Assignments.
Kaplan University School of Health Sciences HI300 Assignment Directions
Unit 7 Assignment Grading Rubric = 90 points
Assignment Requirements
Points possible
Points earned by student
Includes summary for two cases from the OCR website or Internet
0–25
Identifies principal threats in each of the cases
0–10
Identifies what could have been done to prevent the security breach in each case
0–10
Develops security plan for medium sized organization addressing the various safeguards mentioned in the directions
0–30
Discusses security threats of mobile devices in health care delivery
0-10
Critiques plan and identifies its strengths and/or weakness
0-5
Total (Sum of all points)
Points deducted for spelling, grammar, and/or APA errors. (See Writing Deductions Rubric in Doc Sharing)
Adjusted total points
Instructor Feedback: