Question

WRITTEN ASSIGNMENT (CASE STUDY) DESCRIPTION AND RUBRIC
Scenario
You are the Chief Executive Officer [CEO] of a health services organization. This organization has inpatient and outpatient facilities, home healthcare services, and other services that meet your patient population’s needs. It also has a world-renowned AIDS treatment center. The organization has always enjoyed an excellent reputation and its quality of care is known to be excellent.  
Unfortunately, your organization has recently been featured in every media vehicle known to man. The reason: Someone downloaded the names of 4,000 HIV+ patients seen in your HIV clinic and posted the list on the Internet.
The Board of Trustees is furious and wants to fire you. You have been able to convince them that they need to keep you as CEO to fix this major crisis. You hire a computer security consultant who comes into your organization, disguised as a nurse manager. After three days, she comes to you with the following report.
• Nurses log in to the computer system with their passwords and then walk away, leaving the system open and running. • Dr. Jones leaves his password taped to his PC on a piece of paper. • Fax machines and printers are in open rooms without locks. • One password can access the entire database in the hospital including human resources. • There are no programs reminding staff to change their passwords on a regular basis. • She pretended to forget her password and other nurses gave her their password. • She requested sensitive patient files and staff provided her with the files without question.

Assignment Requirements
Your paper should be clear, concise, and 4 double-spaced pages (excluding a title page and a reference page). Only the first 4 pages of your assignment will be graded, so it is important to be concise in your writing and remain on-topic.
You do not need to provide an abstract or describe any of the details provided above.
You must address the following:

• A brief assessment of the problems that your organization faces from a ‘big picture’ health care management point of view. This should be a high level overview of the category/categories of problems that your organization currently faces. (1 page maximum)
• An overview of key laws, regulations, and guidelines that are relevant to the scenario. Be sure to support your assessment with examples of why you believe each law, regulation, and/or guideline is relevant. (1 page maximum)
10
• The identification of 2 similar situations that have occurred within the health care industry in recent years. A brief explanation of how the identified organizations handled the crisis and an assessment of whether this approach would work for your organization. (1 page maximum)
• An explanation of how your organization could best handle this crisis. (1 page maximum)
You are required to:
• Utilize a minimum of four references. Resources used to support your findings should use a variety of information types including interviews, expert opinions, journal articles, and newspaper articles.  
• Provide a reference list in APA format.

Answer 1

Background Statement	A data security breach at a world renowned AIDS treatment center resulting into the listing of 4000 names of HIV positive patients on the internet .
Major Problems and Secondary Issues	The reputation of the healthcare center has been ruptured badly and healthcare center may loose a fair bit of clientale and patients at all levels. Its employees may feel insecured .Its data security systems are under the lens & governance at the healthcare institution is under the lens. As the computer security consultant has found out there are plethora of issues with respect to security of data is concerned as : 1. Nurses log in to the computer system with their passwords and then walk away, leaving the system open 2. Doctors leaves their passwords taped to their PCs on pieces of paper. 3. Fax machines and printers are in open rooms without locks. 4.One password can access the entire database in the hospital including human resources. 5.There are no programs reminding staff to change their passwords on a regular basis. 6. Employees interchange passwords . 7. Sensitive patient files are shared without any due diligence.
Your Role	My role as a CEO is to make sure that all the gaps are known and are plugged in at the first instance first of all and it would be better if the healthcare institution goes in for a more robust data security system where even if the employees or staff or doctors are care less system will not allow them to be as the system itself will point out the names of the violators . There is a serious need for informational training for the employees at the hospital and I should organize that at the right earnest so that the employees undertand the seriousness of the data security breaches.
Organizational Strengths and Weaknesses	Organizational strengths are that it is a world renowned healthcare institution which must other wise have a robust system and it should have the access to and or backing of some of the best informatioinal technology data security services organizations who can restructure its entire system and make it the most robust . Organizational weaknesses are careless attitude of all concerned in the healthcare institution towards data security .Simply the culture is not there in the healthcare institution which vouches for data ecuriity at all levels as information related to patients is a very very sensitive issue . Surprisisngly top management also needs to have a awareness training on dos and donts of computeried systems and computerised atmosphere.
Alternatives and Recommended Solutions	Alternatives are either the healthcare organization goes in with the same system with tightening of security or to go for an altogether new system which will be latest and with robust security features or to go back to manual system. Here old sytems already have so many loopholes and security systems are relaxed in it and manual system will affect the efficiency of the health care system . So it will be better to go in for a new data security system which will make the overall system more robust and leak proof like our modern day vehicles where even if a person uses an identical different key the vehicle will inform the owner and the person will not be able to start the vehicle.
Evaluation	The healthcare instution should go in for a new leakproof data security system . Along with data it should organize an awareness training at all levels and since the breach is so serious and it is basically a crime to give the access of HIV +ve patients to outsiders one ar two heads should also roll at the middle or lower levels because everything cannnot be controlled at the top and persons who are in charge of data bank of HIV+ pataients has a job to do.