Instructions:
Review the following hypothetical to get started. Please apply the facts from references and Lecture Slide Materials for this Hypothetical Scenario Assignment. Note: You can assume the same facts from the previous assignments.
Hypothetical Scenario
Facts
You are the “Privacy Official†(“POâ€) for ABC Hospital. ABC Hospital is located in the state of Arizona. As the PO, part of your job description is to investigate and respond to potential breach incidents to determine if ABC Hospital has breached patient health information (“PHIâ€) under federal law (“HIPAAâ€) and Arizona state law.
On October 8, 2020, you receive a call from the manager of Pigglee Wigglee grocery store in Walla Walla, Washington. The manager explains that one of her staff members found a thumb drive in the cereal aisle. The manager thinks the thumb drive may belong to ABC hospital. She explains that she put the thumb drive into her computer and found what appeared to be the medical records of patients from ABC hospital.
You arrange to have the Pigglee Wigglee manager securely mail the thumb drive back to your attention. On October 10, 2020, you receive the thumb drive and review the contents. Upon review, you confirm the thumb drive contains the PHI of 623 ABC Hospital cancer patients.
Upon further investigation, you have determined that the thumb drive belongs to a Dr. Schmidlap. Dr. Schmidlap is an oncologist employed by ABC hospital. After interviewing Dr. Schmidlap, you learn he was on vacation with his family in Walla Walla. He explains that he went to buy groceries for his family and recalls grabbing a grocery list out of his pocket. He admits that he had a thumb drive in his possession containing ABC hospital patient information. He further explains that he was intending to do some work remotely while he had some downtime with his family. He apologizes for what happened and thinks that he must have set thumb drive down and forgot to put it back in his pocket as he did later realize he was not able to find it.
Assumptions
Assume you discover the following information for each patient from your review of the files:
Patient Name
Patient Address
Patient DOB
Patient Account
Patient SS #
Physician Progress Notes
Nursing Notes
Treatment Plan
Diagnosis of Cancer
Medical imaging and lab results
Assignment Instructions
Assume you have concluded this incident to be a HITECH breach. Further assume you have made the appropriate notifications, and resolved the matter with OCR’s investigation.
Write a 3-5 page essay explaining what steps you would take as the PO to mitigate the risk of thumb drive misplacement by ABC Hospital employees in the future to prevent a similar occurrence.
Include the following in your response:
Describe specific mitigation strategies you would deploy in the organization.
Identify, for each strategy, which aspect of the “Golden Triangle†it addresses (e.g., People, Place, Technology).
Criteria For the Assignment Paper:
Includes Main Elements, Integration and Application, Critical Thinking, Written Communication
Textbook:
Understanding Privacy and Data Protection: What You Need to Know By: T. J. Toohey
ISBN-13: 978-0314291943
Toohey Text:
Chapter 11: Privacy and Data Security in Action
Chapter 10: Privacy and Security Trends
Reference Articles:
– Social Engineering
https://www.knowbe4.com/what-is-social-engineering/
– Spear Phishing
https://www.knowbe4.com/spear-phishing/
– CEO Fraud
https://www.knowbe4.com/ceo-fraud
– Password Setting Tips
https://www.connectsafely.org/wp-content/uploads/Tips-for-Strong-Secure-Passwords.pdf
Attached Lecture PPT For Reference
– Please look at beginning of Module 7 on p. 91 of the PDF slides.
What Students Are Saying About Us
.......... Customer ID: 12*** | Rating: ⭐⭐⭐⭐⭐"Honestly, I was afraid to send my paper to you, but splendidwritings.com proved they are a trustworthy service. My essay was done in less than a day, and I received a brilliant piece. I didn’t even believe it was my essay at first 🙂 Great job, thank you!"
.......... Customer ID: 14***| Rating: ⭐⭐⭐⭐⭐
"The company has some nice prices and good content. I ordered a term paper here and got a very good one. I'll keep ordering from this website."