Homework answers / question archive / CMIT320 Project 3: HIPAA, PII, and PHI Training Instructions   The human resource department is updating its HIPAA Basic Training for Privacy and Security course

CMIT320 Project 3: HIPAA, PII, and PHI Training Instructions   The human resource department is updating its HIPAA Basic Training for Privacy and Security course

Computer Science

Share With

---

CMIT320 Project 3: HIPAA, PII, and PHI Training

Instructions

The human resource department is updating its HIPAA Basic Training for Privacy and Security course. As a security analyst for the hospital, you have been tasked with covering the topics in the training related to the HIPAA security rule and the information that hospital staff need to know regarding personally identifiable information (PII), personal health information (PHI), and electronic personal health information (ePHI) to comply with federal regulations. This week, you will submit your presentation. The presentation should include voice overlays as narrative for each slide. Include one to two slides for each bullet below (4-8 slides total) explaining the following: HIPAA Security Rule HIPAA, PII, PHI, and ePHI Definitions Safeguarding of PII, PHI, and ePHI Disclosures of PII, PHI, and ePHI You may want to refer to the HIPAA Learning Resources from last week. How Will My Work Be Evaluated? In this training guide, you will demonstrate how to integrate your IT skills in an organizational setting. You’ll be combining your technical skills with effective communication techniques to provide learning resources for the client/customer. You will not be evaluated on the voice recording quality. The following evaluation criteria aligned to the competencies will be used to grade your assignment: 1.2.2: Employ a format, style, and tone appropriate to the audience, context, and goal. 1.3.3: Integrate appropriate credible sources to illustrate and validate ideas. 1.4.2: Use vocabulary appropriate for the discipline, genre, and intended audience. 2.3.3: Explain inferences and deductions that follow logically from the evidence provided. 12.1.3: Communicate policies, processes, and/or procedures to stakeholders. 12.3.1: Select controls. 12.3.2: Describe the implementation of controls. 12.3.3: Explain how to assess controls. 12.9.1: Describe organizational compliance with government legislation that impacts technology. 12.9.2: Explain organizational compliance with industry regulations. When you are finished, submit your work by using the box below.

Rubric Name: Project 3: HIPAA, PII, and PHI Training

This table lists criteria and criteria group name in the first column. The first row lists level names and includes scores if the rubric uses a numeric scoring method.Evaluation Criteria

Exceeds Performance Requirements

10 points

Meets Performance Requirements

8.5 points

Approaches Performance Requirements

7.5 points

Does Not Meet Performance Requirements

0 points

Criterion Score

1.2.2: Employ a format, style, and tone appropriate to the audience, context, and goal.

Employs a format, style, and tone completely appropriate to the audience, context, and goal. 

Employs a format, style, and tone appropriate to the audience, context, and goal. 

Attempts to employ a format, style, and tone appropriate to the audience, context, and goal, but there are gaps. 

Style employed is not appropriate to the audience, context, or goal. 

/ 10

1.3.3: Integrate appropriate credible sources to illustrate and validate ideas.

Integrates completely appropriate and highly credible sources to illustrate and validate ideas. 

Integrates appropriate credible sources to illustrate and validate ideas. 

Attempts to integrate sources to illustrate and validate ideas, but there are problems with source credibility or appropriateness, or the integration is choppy. 

Does not integrate sources to illustrate and validate ideas. 

/ 10

1.4.2: Use vocabulary appropriate for the discipline, genre, and intended audience.

Uses enhanced vocabulary highly appropriate for the discipline, genre, and intended audience. 

Uses vocabulary appropriate for the discipline, genre, and intended audience. 

Attempts to use vocabulary for the discipline, genre, and intended audience, but there are lapses and gaps. 

Uses inappropriate vocabulary for the discipline, genre, and intended audience. 

/ 10

2.3.3: Explain inferences and deductions that follow logically from the evidence provided.

Explains clearly the inferences and deductions that follow logically from the evidence provided. 

Explains inferences and deductions that follow logically from the evidence provided. 

Attempts to explain inferences and deductions, but the explanation is not clear, or the inferences do not follow logically from the evidence provided. 

Does not explain inferences and deductions that follow logically from the evidence provided. 

/ 10

12.1.3: Communicate policies, processes, and/or procedures to stakeholders.

Clearly explains all relevant policies, processes, and/or procedures to stakeholders. 

Communicate policies, processes, and/or procedures to stakeholders. 

Attempts to communicate policies, processes, and/or procedures to stakeholders, but there are gaps and/or inaccuracies.  

Does not communicate policies, processes, and/or procedures to stakeholders. 

/ 10

12.3.1: Select controls.

Selects highly effective controls. 

Selects appropriate controls. 

Selects some appropriate controls. 

Does not select appropriate controls. 

/ 10

12.3.2: Describe the implementation of controls.

Describes in an accurate and thorough manner how relevant IT controls are effectively implemented. 

Describes the implementation of relevant IT controls. 

Describes the implementation of IT controls, but the description lacks sufficient detail or accuracy. 

Does not describe the implementation of IT relevant controls. 

/ 10

12.3.3: Explain how to assess controls.

Explains how to assess controls in a thorough and detailed manner. 

Explains how to assess controls. 

Explains how to assess some controls, but gaps remain and/or inaccuracies exist. 

Does not explain how to assess controls. 

/ 10

12.9.1: Describe organizational compliance with government legislation that impacts technology.

Provides a comprehensive description of organizational compliance with government legislation that impacts technology. 

Describes organizational compliance with government legislation that impacts technology. 

Describes organizational compliance with government legislation that impacts technology but overlooks key areas and/or contains inaccuracies. 

Does not describe organizational compliance with government legislation that impacts technology. 

/ 10

12.9.2: Explain organizational compliance with industry regulations.

Provides a thorough and detailed explanation of compliance with industry guidelines and best practices. 

Explains compliance with industry guidelines and best practices. 

Explains some elements of compliance with industry guidelines and best practices but lacks detail and/or contains inaccuracies. 

Does not explain compliance with industry guidelines and best practices. 

/ 10

Rubric Total ScoreTotal

/ 100

Overall Score

Overall Score

 

Exceeds Performance Requirements90 points minimum

 

Meets Performance Requirements80 points minimum

 

Approaches Performance Requirements70 points minimum

 

Does Not Meet Performance Requirements0 points minimum

Associated Learning Objectives
	1.2.2: Employ a format, style, and tone appropriate to the audience, context, and goal.
	Assessment Method:  Score on Criteria - 1.2.2: Employ a format, style, and tone appropriate to the audience, context, and goal.
	Required Performance:  Meets Performance Requirements
	1.3.3: Integrate appropriate credible sources to illustrate and validate ideas.
	Assessment Method:  Score on Criteria - 1.3.3: Integrate appropriate credible sources to illustrate and validate ideas.
	Required Performance:  Meets Performance Requirements
	1.4.2: Use vocabulary appropriate for the discipline, genre, and intended audience.
	Assessment Method:  Score on Criteria - 1.4.2: Use vocabulary appropriate for the discipline, genre, and intended audience.
	Required Performance:  Meets Performance Requirements
	12.1.3: Communicate policies, processes, and/or procedures to stakeholders.
	Assessment Method:  Score on Criteria - 12.1.3: Communicate policies, processes, and/or procedures to stakeholders.
	Required Performance:  Meets Performance Requirements
	12.3.1: Select controls.
	Assessment Method:  Score on Criteria - 12.3.1: Select controls.
	Required Performance:  Meets Performance Requirements
	12.3.2: Describe the implementation of controls.
	Assessment Method:  Score on Criteria - 12.3.2: Describe the implementation of controls.
	Required Performance:  Meets Performance Requirements
	12.3.3: Explain how to assess controls.
	Assessment Method:  Score on Criteria - 12.3.3: Explain how to assess controls.
	Required Performance:  Meets Performance Requirements
	12.9.1: Describe organizational compliance with government legislation that impacts technology.
	Assessment Method:  Score on Criteria - 12.9.1: Describe organizational compliance with government legislation that impacts technology.
	Required Performance:  Meets Performance Requirements
	12.9.2: Explain organizational compliance with industry regulations.
	Assessment Method:  Score on Criteria - 12.9.2: Explain organizational compliance with industry regulations.
	Required Performance:  Meets Performance Requirements
	2.3.3: Explain inferences and deductions that follow logically from the evidence provided.
	Assessment Method:  Score on Criteria - 2.3.3: Explain inferences and deductions that follow logically from the evidence provided.
	Required Performance:  Meets Performance Requirements