Section 1. Written Paper
Non-compliance with HIPAA regulations can result in significant fines
and negative publicity. To help ensure that your organization remains in
compliance with HIPAA regulations you have been asked to write a three
to five (3-5) page paper in which you:
1a. Create an overview of the HIPAA Security Rule and Privacy Rule.
1b. Analyze the major types of incidents and breaches that occur based on the cases reported.
1c. Analyze the technical controls and the non-technical controls
that are needed to mitigate the identified risks and vulnerabilities.
1d. Analyze and describe the network architecture that is needed
within an organization, including a medium-sized hospital, in order to
be compliant with HIPAA regulations.
1e. Analyze how a hospital is similar to and different from other organizations in regards to HIPAA compliance.
1f. List the IT audit steps that need to be included in the
organization’s overall IT audit plan to ensure compliance with HIPAA
rules and regulations.
1g. Use at least three (3) quality resources in this assignment.
Note: Wikipedia and similar Websites do not qualify as quality
resources.
Your assignment must follow these formatting requirements:
- Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
- Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
Section 2. Network Architecture
2a. Create a network architecture diagram (using Visio or an
open-source equivalent to Visio for creating diagrams), based on the
description of the network architecture that you defined above for the
organization to be compliant with HIPAA regulations.
2b. Include in the diagram the switches, routers, firewalls, IDS /
IPS, and any other devices needed for a compliant network architecture.
The specific course learning outcomes associated with this assignment are:
- Describe the process of performing effective information technology audits and general controls.
- Explain the role of cybersecurity privacy controls in the review of system processes.
- Describe the various general controls and audit approaches for software and architecture to include operating systems, telecommunication networks, cloud computing, service-oriented architecture and virtualization.
- Use technology and information resources to research issues in information technology audit and control.
- Write clearly and concisely about topics related to information technology audit and control using proper writing mechanics and technical style conventions.
