Healthcare and Security Breaching Case Study

Security Breaching in healthcareHow serious was this e-mail security breach? Why did the Kaiser Permanente leadership react so quickly to mitigate the possible damage done by the breach?Data breaches are regarded as severe violations of privacy and security. For HIPAA violations, the county prosecutor has the right to file legal actions on the representation of the individuals. When they were informed of the breach, the Kaiser Permanente leadership immediately investigated and apologized to those affected. Kaiser Permanente's leadership reacted quickly because the company could face criminal charges and civil lawsuits. The management formed a team to analyze the root cause and start a mitigation process. Later the Organization should notify its members. Consumers who a compromise of safeguarded PHI has impacted must be informed within sixty days of the breach's detection (Wager, Lee &Glaser, 2017). The notification is also reported to the Secretary of HHS on an annual basis. Later, a press conference is issued to inform on the nature of the breach, information exposed, and response to the breach by the hospital. It can be done on KPs home page of its website.Assume that you were appointed as the administrative member of the crisis team created the day the breach was uncovered. After the initial apologies, what recommendations would you make for investigating the root cause(s) of the breach? Outline your suggested investigative steps.After the Organization is notified of the breach, steps are taken to prevent further damage to the business. Apologies are given to the members who were affected by the breach. The first step is to identify the violation and to stop it from continuing. The business determines how…

Some parts of this document are missing

Click here to view full document

…KP online safe, the institution's executive administration should devise a framework that safeguards medical information and its IT assets, such as networks, servers, code, and apps. Third-party threat monitoring aids businesses in making better use of their assets and putting in place security procedures. The system should follow the policies and procedures set by HIPAA Security rules (Srinivasan, 2016). KP should verify the implementation of security measures, and the administration should seek input from the client's band should consult legal counsel and technicians. Employees should avoid non-secure internet sites, do not exchange credentials, install illegal software, do not use KP's computers for personal gain, and protect hardware from theft to increase KP's security. To avoid data leaking, the Organization can do behavioral analysis on all personnel who have access to classified data. The corporation can begin using…