Tip: "This is a Work MEMO not a Paper. Please type in a MEMO format. Also, see the attachment for additional information to complete the assignment." The Health Insurance Portability and Accountabilit

Module 06 Written Assignment - Implementing Certificate Services in a Health Center

Assignment:

Tip: "This is a Work MEMO not a Paper. Please type in a MEMO format"

The Health Insurance Portability and Accountability Act (HIPAA) includes Title II: Fraud and Abuse/Administrative Simplification, which specifies things healthcare organizations must do to secure and protect protected health information. One method used to comply with Title II is certificate-based security for networked healthcare information systems.

Requirements:

The topic of this assignment is Certificate-Based Public Key Encryption, which protects electronic protected health data while it is in motion, or being transmitted. Consider that you are a new IT director and you have been made aware that your hospital is transmitting patient data electronically, to external entities, without encrypting it.  You are responsible for justifying the need to purchase encryption software for the networked healthcare information systems in a large hospital system. Write a memo to the hospital's CEO justifying the need to purchase certificate-based Public Key Encryption software and then request permission to make this purchase.  Include the following criteria:

  • Describe at least three types of protected health electronic data that are electronically communicated externally by your hospital that are covered by HIPAA and therefore must be protected.

  • Explain in your own words how certificate-based public key encryption works to secure electronic data that is transmitted from one location to another.

  • Do some internet research and find at least one real-world software product to recommend that the hospital purchase for use to enable public key encryption to protect its data.  Remember that this must be a software that provides public key encryption specifically for protected health data in motion – not a software that protects data that is secure on a drive.

Your memo should include the following criteria:

  • 2-3 pages in length, double-spaced.

  • Free of spelling, grammar, APA format for reference & in-text citations, and punctuation errors.

Submit your completed assignment by following the directions linked below. Please check the Course Calendar for specific due dates.

Save your assignment as a Microsoft Word document.



Rubric:

Here are the rubrics for this week's assignments.  Remember that in your Written assignment, you are looking for a software that encrypts Data in Motion, not data sitting on a server. Be sure to look at the detailed rubric as that will help you with the assignments!

Written Assignment:  Implementing Certificate Services in a Health Center

Criteria

Points

Describe at least three types of protected health electronic data that are electronically communicated externally by your hospital that are covered by HIPAA and therefore must be protected. This would not be individual pieces of data as in Patient Name, MR#, or Date of Birth - we are looking for types of records or information that is electronically communicated by the hospital between systems that would need to be encrypted.

10

Explain in your own words how certificate-based public key encryption works to secure electronic data that is transmitted from one location to another.  This is an important part of the assignment.

15

Discussed at least one real-world software product that could be used to enable public key encryption in a hospital setting. (Must be for data in motion or it is not Public Key Encryption (PKE), software found for data on a server or stationary will receive 0 points here)

Free of spelling, grammar, APA format for reference & in-text citations, and punctuation errors.

Total

35


Lesson Content:

Here is a link to an excellent summary on HIPAA Title 2 that will help if you would like more information on that for your assignment this week.

https://eligible.com/community/hipaa-title-ii/