Week 4 Assignment ISSC331 please read below

Assignment Instructions

Instructions: Do Exercise 7 or Exercise 8 below, but not both.

Exercise 7: Privacy or Security Complaint to the Office of Civil Rights (OCR)

Learning Objectives and Outcomes

You will describe the process of submitting a privacy or security complaint to the OCR.

Assignment Requirements

Imagine
that you are a sophomore at Premier College, living in Room 203, Graham
Dormitory complex, 1212, University Road, Metropolis, West Virginia.
The college requires you to maintain current medical and vaccination
records as proof of your physical health. Over the past few months, you
have not been well due to increased amounts of academic pressure. Also,
your parents recently separated, and you found yourself unable to
concentrate in class or sleep well at night. You went to the student
medical center and requested some medicines to help you sleep. After
consulting with the staff doctor, you were issued a prescription for the
treatment of depression.

On
your second day of the class, your professor tells you that he too
comes from a divided family and had to take medicine to help him cope
with the situation. You ask him how he knew about your situation, and he
replied that all student medical records were available to every
instructor and staff member at Premier College, regardless of whether
they are one of your instructors or not. Hearing this, you are highly
dejected and feel that your privacy rights have been violated.

You
somehow wind up all your discussions with the instructor and rush
towards your room. You have a sleepless night and you decide that the
first thing you will do in the morning is to fight for your privacy.
After researching for half a day, you learn that filing a privacy or
security complaint to the OCR had been a tedious process before July
2009. You arrange for a meeting with a professional named Alex, who
files such complaints.

The
next morning, you visit Alex and before anything else, you ask him to
explain the new regulation for filing a privacy or security complaint.
Alex narrates that on July 27, 2009, the Secretary of Health and Human
Services (HHS) delegated to the Director of OCR the authority to
administer and enforce the HIPAA Security Rule. He explains that this
action improved HHS’ ability to protect individuals’ health information
by combining the authority for administration and enforcement of federal
standards for health information privacy and security. Those standards
are outlined in the HIPAA legislation. Alex also emphasized the fact
that with the new regulation, the process of filing a privacy or
security complaint has become simpler and more effective.

After
hearing all this, you say goodbye to Alex and decide to file the
complaint by yourself. A major reason for this is your limited financial
means. You start filling out the form and realize that certain sections
need clarity. Ignoring all these facts, you decide to continue filling
out the form. As you fill out the form, you start getting interested in
the whole process of filing a complaint. To ensure that what you are
doing is right, you decide to find someone to validate your work. After
pondering for a while, you think of your Uncle Samuel, who is working as
a legal advisor with a well-known law firm. You write to Uncle Samuel
describing all that has happened and you send him the complaint form.
You share with your uncle that you would be interested in understanding
the entire process.

Uncle Samuel assigns you the following tasks before he helps you understand the process:

1.Identify
the early iterations of the HIPAA act and how the law has been modified
to facilitate easier access to consumer complaints and enforcement.

2.Identify specific sections of the form that need critical attention while filing the complaint

3.Analyze the situations that one gets into if the critical sections are not well identified.

4.Draft a brief summary, collating all your findings for your uncle’s review.

Deliverables and format:

Submit your answer in a Microsoft Word document in not more than 300 words.

Font: Arial 10 point size

Line Spacing: Double

OR

Exercise 8: Section 404

Learning Objectives and Outcomes

This
assignment will enable you to assess the compliance requirements of
Section 404 and prepare a checklist to ensure Section 404 compliance.

Assignment Requirements

This
assignment builds upon the role-play conducted in the roles section of
this lesson. In this assignment, you play the role of an internal
auditor. You’ve been given the task of creating a specific checklist to
insure compliance with Section 404.

You
need to review the requirements of Section 404 and create a list
identifying compliance requirements. The checklist should include
information about reporting requirements, audits, IT security, and any
other topics relevant to Section 404 compliance. The checklist should
include information on internal controls over financial reporting (ICFR)
controls as well as any known difficulties in complying with Section
404.

Submission Instructions:

Submit your answer in a Microsoft Word document in not more than 500 words.

Font: Arial 10 point size

Line Spacing: Double

Assignment Grading Criteria

1. Content 50%

2. Writing Conventions (Grammar and Mechanics) 10%

3. Organization of Ideas/Format 300 Words 30%

4. Source (APA Format) 10%