Reference no: EM133358516

You have just been hired by ACME corporation. ACME has just purchased an organization that has 100 clinics across the nation. As part of ACME's management review, they want to ascertain the degree to which these clinics are in compliance with HIPAA. ACME also wants to be very strategic moving forward and wants to make sure that the clinics offer a competitive advantage regarding HIPAA, as well as govern the controls towards compliance in the most efficient way. Some clinics are using limited CIS controls, other clinics are leveraging NIST frameworks, while others are wanting to explore the HITRUST platform.

1. You have been asked to use all the information you have learned in this session and determine if ACME and this new acquired company of clinics would pass a HIPAA audit.

2. What immediate recommendations do you have for the leadership regarding how to pursue an internal review (used materials from class or research additional ones)?

3. What long-term recommendations can you think of as you try to help harmonize governance controls, abide by the law, and create a climate of competitive advantage regarding security?

4. How prepared are the clinics as it pertains to preventing and recovering from ransomware?

5. What steps should they take now?