ISIT437/ ISIT937: Hillside Hospital - Case Study - SCIT - Risk Management - Management Assignment

Internal Code: MAS3044

Information Technology Security and Risk Management

Case Study: Hillside hospital is a 100 bed hospital that includes various facilities as emergency care, maternal and child health, chronic disease management with different specialties. The hospital has facilities such as pharmacy, radiology, physiotherapy and rehabilitation services. Several healthcare providers such as specialist, registrars, medical officers, nurses, physiotherapist and other allied health providers work at the hospital. The General Practitioners from the Hillside Medical Centre can also admit their patients to the Hillside Hospital. Some of the staff members in the hospital are involved in medical research and clinical trial and they also need to use patients’ information from the system. Questions: Design a security and risk management solution which will fulfil security requirements of the hospital. As your group considered the security management of health information system of hospital environment, you will need to understand the information security requirement of healthcare environment, different access level, ensuring patient confidentiality, Health Privacy Acts, Policy etc. Therefore, your literature review will be on health information security. That will ensure you have planned and developed the security program with appropriate protection mechanism.