Benchmark - Impact Analysis Part 2: AuditBenchmark - 3.3: Perform requirements analysis to identify and obtain data and evidence in support of cyber law inquiries and incidents. Next, gauge and evalu

Benchmark – Impact Analysis Part 1

Compliance is the conformity to set rules and specifications of standards, policies, and or the law. The regulatory compliance in organizations defines the goals and objectives that the organization aspires to attain and considers the organization's adherence to rules and regulatory guidelines that are set up (Lin, 2016).

There are recommendations, guidelines, and laws of compliance in the healthcare industry to facilitate comprehensive and quality services offered. The law's compliance is recommended to mitigate the risk of loss of life and medical practitioners' negligence. The importance of the patients' confidentiality is also necessary to curb any form of subjected stigmatization and defamation. Failure to adhere to the set guidelines and regulations subjects the healthcare facilities liable to litigations in law's judicial courts. Specific compliances in the Healthcare Industry are as follows;

The Health Insurance Portability and Accountability Act (HIPAA) is vital as it ensures the privacy and confidentiality of protected health data from external and unauthorized access. It is also responsible for overlooking and processing complaints. HIPAA is strict and mandatory for its incorporation in the Healthcare facilities framework; it generally sets guidelines for national mapping and protection of Healthcare information from the breach. It does not primarily focus on legal advocations or advice.

The DoD directive reassigns duties for the compliance to the federal laws governing information privacy and breach. It helps facilitate the integration of health data with general information privacy guidelines. It also contracts and procures according to the federal laws that govern health's breach and privacy policies; it reassigns the individual security on the identifiable health information.

The healthcare industries are mandated by the Joint Commission to be ready in the case of an emergency; the critical focus is not only on the patients but also on the staff. Healthcare facilities are required to keep the lights on regardless of the situation they might be facing.

Implementation of data recovery software to ensure the Love Health Care Center’s data is backed up and can be retrieved in the occurrence of a disaster. However, suppose the facilities have been damaged extensively. In that case, logistical considerations such as relocation, communication restoration, or sourcing essentials from desks and computers to transporting patients and staff should be promptly ensued.

Specifying backups and off-site procedures should be frequent, especially in backing up data and vital data storage for the Hospital. The backup and the people responsible for manning the backups should always be around the premises to ensure the tasks are performed thoroughly.

To implement the technological and engineering tools that will enable the realization of a patient-centered healthcare system, the first step is to identify the preexisting challenges in the United States Healthcare systems (IOM,2001). The four-level model has been adopted to clearly outline the structures and dynamic capacity of the healthcare systems. The healthcare system is divided into; the individual Patient, the care team, the organization, and the political and economic environment (Ferlie and Shortell, 2001). The model ensures the facility's professional caregivers are provided with all the necessary resources to ensure the patients, the number one priority, is well catered for quality and timely recovery—this aid in the Hospital’s development and ultimately implementing its objectives.

The governance of data is essential in the provision of critical data integrity on the informational data; the Love Health Care Center will comply by installing multiple information systems that feed and authenticate the data into the Electronic Health Recording system. It is beneficial as trails of the records can be comprehensively accounted for.

When the E.H.R systems are not thoroughly managed, its data warehouse can act as a data warehouse with a defined path for data governance and preserve the integrity of the data averting the risk of breach. The data governance by the E.H.R ensures the information is manageable due to its capability to retain data.

Love Health Care Center will have an upright layout in its organizational structure comprising of;

The board: It is comprised of directors from the health care practitioner’s community and any members of society who have the intention of improving the health care in the community, such as religious clergy, but not limited to the spiritual, moral grounds.

Executives: Critical in managing the hospital’s objectives and performance to serve the patients and implement sustainability and quality strategies on services offered. The executive will be headed by an experienced chief operating officer to safeguard the financial health as well in the organization.

Departmental Administrators: They report to the executives and manage the hospital’s daily routines and operations.

Patient Care Managers: Comprised of nurses and physicians who manage the professionals that provide care directly to the patients. to ensure the legal compliance rules are adhered to.

Human Resource: To ensure the timely and effective response, the healthcare facilities Human resources delegates duties and tasks to ensure the compliance of the set standards and regulations. The technical staff ensures the hygienic and reliable maintenance to ensure the Hospital is safe for all the persons in the facility. The management is in charge of implementing the breach and privacy data measures, especially in the Information and Technology department. The front desk and operations are in charge of taking calls and keeping logs for the patients that arrive and also acts as a receiver for the facilities. This complies with the guidelines and set regulations that are strictly adhered to ensure the facilities offer exemplary services.

To protect the data, facilities are encouraged to invest in protective measures in the computer and software systems to safeguard and prevent any external attacks on the computer networks and computer systems. It contains any forms of threats, including damage and theft of software, hardware, and any other form of electronic data. The field is proving vital due to the ongoing increase and reliance on the internet and computer networks and systems. Secure software ensures the team's coordination of workflow with few and rare occasions mishaps to ensure goal achievements.

Any breach is required to be reported promptly on all the affected areas in a timely manner, a grace period of sixty days is given; however, the sooner the breach is reported, the sooner the breach recovery and failure of compliance is considered willful neglect and a penalty of ten thousand dollars per violation will be incurred. The healthcare facility is required to notify the breach to all the affected individuals and the United States Department of Health and Human Services secretary. The breach can also be reported to the relevant authorities such as the police and FBI, depending on the violation's magnitude and risk.

The organizational framework structure and critical data assets will help the organization assess the health and illness patterns in the community, identify any unmet needs in the regional health sector, and document the fiscal records managed by the appropriate managerial teams to ensure mitigation of inappropriate extravagant use.

References

Ferlie EB, Shortell SM. Improving the quality of health care in the United Kingdom and the United States: a framework for change. Milbank Q. 2001;79(2):281-315. doi: 10.1111/1468-0009.00206. PMID: 11439467; PMCID: PMC2751188.

HIPAA Compliance within the MHS. (n.d.). Retrieved October 13, 2020, from https://www.health.mil/Military-Health-Topics/Privacy-and-Civil-Liberties/HIPAA-Compliance-within-the-MHS

HIPAA Privacy and Security Rules | Title II | Policies and Procedures are Important. (2017). Retrieved October 14, 2020, from https://flank.org/regulations/the-health-insurance-portability-and-accountability-act-of-1996-hipaa

Institute of Medicine (US) Committee on the Health Professions Education Summit. Health Professions Education: A Bridge to Quality. Greiner AC, Knebel E, editors. Washington (DC): National Academies Press (US); 2003. PMID: 25057657.

Lin, Tom C. W., Compliance, Technology, and Modern Finance (2016). 11 Brook. J. Corp. Fin. & Com. L. 159 (2016), Temple University Legal Studies Research Paper No. 2017-06, Available at SSRN: https://ssrn.com/abstract=2904664

Rouse, M. (2020). What is DRaaS? Retrieved October 14, 2020, from https://searchdisasterrecovery.techtarget.com/definition/disaster-recovery-as-a-service-DRaaS

Schatz, Daniel; Bashroush, Rabih; and Wall, Julie (2017) "Towards a More Representative Definition of Cyber Security," Journal of Digital Forensics, Security and Law: Vol. 12 : No. 2 , Article 8. DOI: https://doi.org/10.15394/jdfsl.2017.1476 Available at: https://commons.erau.edu/jdfsl/vol12/iss2/8

Top 5 Areas of Compliance to Watch for Healthcare Facility Managers. (n.d.). Retrieved October 14, 2020, from https://news.microsoft.com/ignite-2020-book-of-news/