Purpose: This assignment is intended to provide you with an understanding of the HIPAA Requirements for a Contingency Plan for a Covered Entity of Business Associate. It also will provide you with the opportunity to learn and understand the HIPAA Audit Protocol published by the Department of Health and Human Services. Activity: Review a current HIPAA Contingency Plan, evaluate the requirements under the HIPAA Security Rule and the HIPAA Audit Protocol for the Contingency Plan, and update the Contingency Plan to meet the requirements of the HIPAA Regulations and the HIPAA Audit Protocol (find URLs in the assignment attachment). This will also become part of your final project for the course. Instructions: 1. Review the following a. Chapter 11, Pages 322 – 325 in the Oachs & Watters Book (2016)b. HIPAA Security Regulations - 164.308(a)(7) (164.308(a)(7)(ii)(A) to 164.308(a)(7)(ii)(E)) - https://www.hhs.gov/sites/default/files/ocr/privac... (page 65)c. HIPAA Security Series – Administrative Safeguards, Contingency Plan – pages 19 – 22 https://www.hhs.gov/sites/default/files/ocr/privac... d. HIPAA Audit Protocol for 16.308(a)(7) - https://www.hhs.gov/hipaa/for-professionals/compli... 2. As identified in the Final Project Use Case, you are the new Compliance Officer at Grace University Hospital and have been given the responsibility to ensure that the current HIPAA Contingency Plan (attached below) meets the requirements specified in the HIPAA Security Rule as well as the HIPAA Audit Protocol that was published in 2016 by the Department of Health and Human Services.3. Below is the current HIPAA Contingency Plan that your organization has established. It was last updated on 1/10/2014.4. Since then, your organization has added 2 new systems that store protected health informationa. Dictation System – Dictaphone – stored on Local Server #1, Backed up daily to unencrypted tape that is stored in the main office in a safeb. Electronic Collections Database – cloud based system, Backed up by vendor daily to a secure off-site solution5. For this assignment you will:a. Review the current HIPAA Contingency Plan below to evaluate if any components are missing based on the HIPAA Security Rule and the HIPAA Audit Protocolb. Review the current status of the backup processes for the organization c. Develop an updated HIPAA Contingency Plan to meet the requirements of the HIPAA Security Regulations and the HIPAA Audit Protocold. Evaluate current Contingency Plan Processes to determine if any changes need to be madee. Ensure that the two new systems that store and maintain protected health information are added to the contingency plan as appropriate 6. Deliverables for this assignment:a. An updated HIPAA Contingency Plan (this will become part of your final assignment)b. A Summary Document of what was missing from the current HIPAA Contingency Plan (i.e. define exactly what you changed, added, or updated). Attach this as a separate document in an outline format. Specifically list out the missing pieces to the contingency plan in an outline format including where your source of the information was from (HIPAA Audit Protocol, HIPAA Security Series, or HIPAA Security Regulations)i. Example: Contingency Plan is missing the individual responsible for the Contingency Plan – HIPAA Audit Protocolc. Finally, identify specific recommendations that you would make to the contingency plan process that would enhance the process to better protect and preserve the confidentiality, integrity, and accessibility of the protected health information and how would that enhance security.i. Example: Off-site backup solutions for Local Server #1 and Local Server #2. This would allow for better physical security of the backups in case of a local disaster at this Organization. Information about Your Organization’s data:Your organization currently has an electronic health record, a lab information system, a radiology information system, a dictation system, and a collections database. The organization is currently running 2 local servers that maintain most of the system that creates, stores, transmits, and maintains protected health information. In addition, protected health information is being stored on a file server located on Local Server #2 as well as being transmitted through e-mail, which is locally hosted on Local Server #1. Please see below for more details: Electronic Health Record – stored on Local Server #1, Backed up daily onto an unencrypted hard drive (entire server – Local Server #1) that is stored in the office of the IT Manager. Monthly a backup is made and brought to a safety deposit box at the local bank (Electronic Health Record Only). Lab Information System – Stored on Local Server #1, Backed up daily onto an unencrypted hard drive (entire server – Local Server #1) that is stored in the office of the IT Manager Radiology Information System – Stored on Local Server #2, , Backed up daily onto an unencrypted hard drive (entire server – Local Server #2) that is stored in the office of the IT Manager in a locked safe File Server –Stored on Local Server #2, Backed up daily onto an unencrypted hard drive (entire server – Local Server #2) that is stored in the office of the IT Manager in a locked safe Dictation System – Dictaphone – stored on Local Server #1, Backed up daily to unencrypted tape that is stored in the office of the IT Manager in a locked safe Electronic Collections Database – cloud based system, Backed up by vendor daily to a secure off-site solution Your OrganizationHIPAA PolicyContingency PlanEffective Date: April 20, 2005Reviewed/Updated Date: January 10, 2011Policy Owner: HIPAA Security OfficerPolicy:In the event that the systems that This Organization uses for managing day to day operations pertaining specifically to protected health information become unavailable, a plan of action to continue with the day to day operations of the organization are defined. The contingency plan for This Organization system will focus on data backup, disaster recovery, emergency mode operation plan, and testing and revision. Data Back Up Plan:1. The systems that use, store, and maintain ePHI for This Organization mostly stored on local servers.2. The Organization has two local servers that house the majority of the systems:a. Local Server 1b. Local Server 23. Local Server #1 and Local Server #2 are both backed up daily and stored on unencrypted hard drives in the IT Manager’s office within a locked safe.4. One a monthly basis, a backup of the electronic health record databased is completed to an unencrypted flash drive that is stored in a safety deposit box at the local bank5. The IT Manager is responsible for all successful backups to the systems and local servers. 6. If there is a concern with the backup process, the IT Manager will work directly with the HIPAA Security Officer.Data Recovery Plan:1. In the event of data loss, the IT Manager and HIPAA Security Officer will work together for data restoration2. Data restoration will occur from the most recent back up of the failed server3. Once the device (server) is back up and function, the IT Manager and HIPAA Security will work together to restore the systems and data to the server.4. The Electronic Health Record will always be the first system to be restored as it is the most valuable to the organization.5. Once the Electronic Health Record is restored, an analysis of the integrity of the data and information will be taken based on the printed schedule from the previous day.6. After the validation of the information from the Electronic Health Record, the remainder of the systems will be restored in the following order:7. After each system is restored, there will be a process of validation of the information prior to moving on to restoring the next system8. Data restoration will take approximately 5 – 10 hours.9. A log will be kept of the entire data restoration process, including an issues that came up in the process.Emergency Mode Operation Plan:1. In the event that an unplanned downtime occurs, the HIPAA Security Officer becomes the lead contact for the emergency mode operations and physical contingency plan.2. If the event of an event where This Organization’s systems are not available, communication will be given by leadership at each location within the facility.3. Documentation of patient’s visit will be done on paper and kept within the temporary records in each area of the clinic.4. The Leadership in the Clinic area will be responsible for ensuring documentation is being successfully completed on paper and stored appropriately.5. This Organization will continue to monitor and evaluate the current downtime and give estimates expected down time internally to workforce members.6. If it is determine that there is any type of risks to patients due to the emergency, This Organization reserves the right to cancel patient appointments.Testing and Revision Plan:7. This Organization will regular test the recovery plan to assure that it is appropriate and meets business expectations8. After testing of the contingency plan, if revisions are needed, This Organization will promptly make the changes9. If changes are made, proper training and updating awareness to the workforce will be conducted.10. This Organization will maintain documentation of testing and revisions to the contingency plan for 6 years.Instructions: Please find the detailed instructions for this assignment in the attached document: HIPAA Contingency Plan AssignmentRubric: Detailed instructions on how this assignment will be graded is located at the end of the attached assignment. Due Date: Sunday, 07/26 by End of Day (60 Points) Please look at attached document below; I'll be happy to provide any additional information. Please look at the grading rubric as well.

Assessment #4 Instructions: Improvement Plan Tool Kit. For this assessment, you will develop an online resource repository of at least 12 annotated professional or scholarly resources that you consider critical for the audience of your safety improvement plan to understand or implement to ensure the success of the plan.Communication in the health care environment consists of an information-sharing experience whether through oral or written messages (Chard & Makary, 2015). As health care organizations and nurses strive to create a culture of safety and quality care, the importance of interprofessional collaboration, the development of tool kits, and the use of wikis become more relevant and vital. In addition to the dissemination of information and evidence-based findings and the development of tool kits, continuous support for and availability of such resources are critical. Among the most popular methods to promote ongoing dialogue and information sharing are blogs, wikis, websites, and social media. Nurses know how to support people in time of need or crisis and how to support one another in the workplace; wikis in particular enable nurses to continue that support beyond the work environment. Here they can be free to share their unique perspectives, educate others, and promote health care wellness at local and global levels (Kaminski, 2016).You are encouraged to complete the Determining the Relevance and Usefulness of Resources activity prior to developing the repository. This activity will help you determine which resources or research will be most relevant to address a particular need. This may be useful as you consider how to explain the purpose and relevance of the resources you are assembling for your tool kit.  Instructions Using Google Sites, assemble an online resource tool kit containing at least 12 annotated resources that you consider critical to the success of your safety improvement initiative. These resources should enable nurses and others to implement and maintain the safety improvement you have developed.It is recommended that you focus on the 3 or 4 most critical categories or themes with respect to your safety improvement initiative. For example, if your initiative concerns improving workplace safety for practitioners, you might choose broad themes such as general organizational safety and quality best practices; environmental safety and quality risks; individual strategies to improve personal and team safety; and process best practices for reporting and improving environmental safety issues.Following the recommended scheme, you would collect 3 resources on average for each of the 4 categories. Each resource listing should include the following: An APA-formatted citation of the resource with a working link. A description of the information, skills, or tools provided by the resource. A brief explanation of how the resource can help nurses better understand or implement the safety improvement initiative. A description of how nurses can use this resource and when its use may be appropriate. Remember that you must make your site ‘public’ so that your faculty can access it. Check out the Google Sites resources for more information.Here is an example entry: Merret, A., Thomas, P., Stephens, A., Moghabghab, R., & Gruneir, M. (2011). A collaborative approach to fall prevention. Canadian Nurse, 107(8), 24–29. Retrieved from www.canadian-nurse.com/articles/issues/2011/octobe...