Fluent Essays

Research on health organization breachStep 3: Choose a Case and Complete the Project Plan Now that you have a better understanding of various aspects of organizational behavior from the readings in the previous step, select a hospital or health care organization as your case to research. Consider an organization you are familiar with or one for which you can find sufficient information. To maintain confidentiality, you do not need to mention the name of the organization. You can also refer to the Health and Human Services (HHS) site for organizations that have reported breaches. Verify that you can locate sufficient, reputable, and informative information on your chosen case. Also, read this cybersecurity field overview to consider different roles that may apply as you review your case.  Now that you have chosen a case, the next action is to establish how you will divide the work. Use your team space to share ideas and drafts of each member’s contribution. Complete all portions of the project plan and submit it to your team space by the end of Week 8. To recap the deliverables, each team will have three weeks to complete the following: · Complete and submit the team communication and project plans by the end of Week 8. · Conduct research to capture the organizations infrastructure and processes, the threats to personal health information (PHI) and determine a strategy to mitigate the threats you anticipate. This research will go into the technical report (or white paper, nine to ten pages excluding cover sheet, references, and any appendices) in accordance with the directions in Steps 4 and 5. After the paper is written, you will create a one-page executive summary of the paper. It will be part of the technical report document, immediately after the cover sheet and before the text of the report.  · Complete the lab activity to crack passwords and create a summary lab report. This should be done by Week 9. · Develop a high-level narrated slide presentation for the organization’s board of directors. This asynchronous presentation must be no longer than 12 slides, excluding the references slide and cover slide. It is due at the end of Week 10.  Step 4: Create an Organizational Profile for Your Case Now, it is time to research your chosen case to determine how the organization’s IT department operates, how it is structured, and how PHI is moved around the organization for stakeholders’ use. Revisit guidelines on conducting research, if needed. Next, review the materials in the links below to define and describe the hospital’s information system infrastructure.   · Overview of Systems & Networks · Open Systems Interconnections (OSI) Model · TCP/IP protocols · Network protocols It is important to understand the organization’s workflow processes—how they move patient information to the business units that need to process and manage that information, from billing to physician care. All these organizations employ hardware and software within their information systems. It is critical to· University of Pittsburgh Medical Center · On August 8, 2020 UPMC became aware that protected health information may have been inappropriately disclosed as the result of an employee sending a medication administration report to an outside organization without a business need. UPMC immediately initiated an internal investigation upon becoming aware of the issue. What information was involved? Through the investigation, UPMC determined that names, internal UPMC identification numbers and medication administration data may have been inappropriately disclosed. “Medication administration data” may include the drug name, dosage, time/date of administration, and reason for administration. Please be assured that neither Social Security Numbers nor medical records were inappropriately accessed/disclosed. What are we doing? UPMC has terminated the responsible employee’s access to UPMC Systems, and they are no longer affiliated with UPMC. Upon discovery of this issue, UPMC notified federal authorities of this event. UPMC has also notified the U.S. Department of Health and Human Services Office for Civil Rights, and will notify other regulatory agencies as appropriate. We are notifying you out of an abundance of caution and so that that you can take any steps that you feel are necessary to monitor your private information. On March 5, 2021 UPMC began mailing letters to affected patients. This letter includes additional resources and information available to affected patients, should they  consider them to be necessary. UPMC established a call center and toll-free hotline for affected individuals who wish to request additional information related to this event. The hotline number will be active for 90 days from the date of this notice, and is available Monday through Friday from 9am to 5pm EST. The number to dial is 1-833-814-8363. Charles Hilton & Associates Alerts UPMC Patients to Data Breach Charles J. Hilton & Associates P.C. (CJH) is alerting more than 36,000 UPMC patients that some of their personal data may have been inappropriately accessed as the result of an information security breach at the company, which provides billing-related legal services to UPMC. This event did not occur at UPMC or affect the security of its electronic patient records or other computer systems.  CJH discovered suspicious activity affecting its employee email system in June. On July 21, 2020, the investigation determined that a number of CJH email accounts had been logged into by hackers during the time period of April 1, 2020 to June 25, 2020. After a lengthy investigation by computer forensics specialists, CJH confirmed to UPMC in December that some of UPMC’s patient information may have been accessed in this breach. While there is no evidence that this data was misused, CJH and UPMC are alerting affected patients through personal letters and public notification.  CJH’s investigation determined that its affected email accounts contained various types of informati