Reference no: EM133086443

1. Review the IoM's 1999 and 2001 reports under Module 7 Resources. Compare and contrast the recommendations in these reports. Evaluate the outcomes of their implementation and assess their impact on healthcare quality improvement (familiarize yourself with Quality Improvement points). Ascertain the consequences of not using HIT and frame your recommendations for improvement of healthcare quality using HIT?

2. HIPAA (1996) and HITECH (2009) Acts contain provisions for the protection of health information both by Covered Entities (CEs) and Business Associates (BAs). Compare Security Rule provisions for CEs and BAs in both Acts? Identify the organization responsible for monitoring its compliance by providers and explain its mode of operation. Ascertain the value of the Security Rule provisions for electronic health records. Finally, assess implications for noncompliance of the Security Rule provisions by healthcare organizations?

3. Develop an example case that can be used in the presentations where a Chief Information Security Officer (CISO) at a local healthcare facility has not adopted any Password use policy yet. Delineate the role of CISO in the implementation of the password use policy. Offer approaches to developing a Password use policy for this organization.

Tips: Identify and discuss at least three essential components of the password use policy that must be followed to securely log into the facility's healthcare information systems. Explain which of these components is most critical and why. Ascertain implications for the organization if the policy is not followed strictly.