Preview

Lab: Align Compliance Requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA

Satisfactory Essays
Open Document
Open Document
271 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Lab: Align Compliance Requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA
Lab 6
Align compliance requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA
Hyung Ryu
ITT Technical College, Everett Campus

Author Note This assignment is being submitted on July 22, 2014, for Even Anderson introduction to project management PM3110

1. What are the five principles of the AICPA Trust Services & principles criteria?
2. What does the AICPA Trust Services & Principles Criteria recommend for concerning inactive user accounts on a web site?
3. With what section of SOX would the IT professional deal the most and why?
4. In HIPAA, under what scenario is a healthcare provider required to notify all patients and the department of health and human services when a security breach is discovered?
5. Where would someone go in order to find the quarterly and annual reports for a publicly-traded company to verify SOX compliance?
6. Describe the various levels of PCI DSS compliance as defined by VISA
7. In HIPAA, what information is protected and who is covered by the Security Rule?
8. For the 12 core requirements of the PCI DSS standard, what are the 3 steps or phases for assessing and reviewing compliance with the PCI DSS standard?
9. What are the fines associated with violating HIPAA compliance requirements?
10. What are the PCI DSS Procedures used when auditing an organization for security?
11. What are the 11 titles of mandates and requirements for SOX compliance?
12. What purpose may COBIT serve to help maintain compliance for regulations such as Sarbanes-Oxley?
13. What is the Safeguard Rule as it relates to GLBA?
14. What is the purpose of the PCI security audit procedures?
15. Describe the process to still obtain/maintain PCI DSS compliance even though a required security control/process is unrealistic for an organization?
Continue Reading
View Writing Issues

You May Also Find These Documents Helpful

  • Satisfactory Essays

    Lab 9
    • 1001 Words
    • 3 Pages

    Lab 9

    7. In order to perform a PCI DSS compliance audit on your e-commerce website, what should you incorporate into Requirement #6 regarding “Develop and Maintain Secure…

    • 1001 Words
    • 3 Pages
    Satisfactory Essays
    Read More
  • Best Essays

    Sarbanes Oxley Act
    • 3132 Words
    • 13 Pages

    Sarbanes Oxley Act

    Financial reporting has been dissected over and over again by legislation. The U.S. Securities and Exchange Commission (SEC) hold the key to providing protection and integrity when companies are submitting their financial statements. Although their mission is to provide order and efficiency for financial markets, insidious plans are still developed by companies which ultimately result in turmoil to the economy. To provide a safeguard to investors, the Sarbanes-Oxley Act (SOX) was passed by congress in 2002, which was constructed because of fraudulent acts of well-known companies such as Enron. Before the SOX was inaugurated, two sets of accounting rules were used as guides for CPA firms.…

    • 3132 Words
    • 13 Pages
    Best Essays
    Read More
  • Satisfactory Essays

    1.2 Explain How HIPAA Protects Patients Electronic Protected Health Information
    • 351 Words
    • 2 Pages

    1.2 Explain How HIPAA Protects Patients Electronic Protected Health Information

    In this week’s assignment, you are asked to research HIPAA and how it has provided…

    • 351 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Powerful Essays

    The Sarbanes-Oxley Act
    • 1677 Words
    • 7 Pages

    The Sarbanes-Oxley Act

    The 1980s was a time where many corporate misbehaviors and takeovers cost many people their jobs. The Treadway Commission, named after the organizer James C. Treadway, Jr., took the lead in examining the factors why companies misbehave and made recommendations to reduce fraudulent financial reporting. A group of private sectors in the accounting profession volunteered to carry out the goals of the Treadway Commission. This led to the formation of the Committee of Sponsoring Organizations of the Treadway Commission, also known as COSO (Arens, Elders, & Beasley, 2010). COSO was the venue in driving the swift passage of SOX. SOX established the Public Company Accounting Oversight Board (PCAOB) under the oversight of the Securities and Exchange Commission (SEC). The board is charged with the responsibility of overseeing and disciplining independent accounting firms in their role as auditors for public companies. The board has oversight on the implementation of stricter corporate governance, more disciplined exercise of auditor’s independence, enhanced audit reporting, more frequent review of control risk assessments and more informative report disclosures. Under the Sox, the SEC required firms to register with PCAOB to monitor strict compliance of SOX standards in the manner by which public accounting…

    • 1677 Words
    • 7 Pages
    Powerful Essays
    Read More
  • Better Essays

    Computer Ethics: HIPPA, CIA And Safeguards
    • 1284 Words
    • 6 Pages

    Computer Ethics: HIPPA, CIA And Safeguards

    Analyze the security issues and the HIPAA security requirements and describe the safeguards that the organization needs to implement in order to mitigate the security risks. Ensure that you describe the safeguards in terms of administrative, technical, and physical safeguards.…

    • 1284 Words
    • 6 Pages
    Better Essays
    Read More
  • Good Essays

    HIPAA Privacy Manual
    • 47886 Words
    • 192 Pages

    HIPAA Privacy Manual

    engaging in reasonable opposition to any act or practice that the person in good faith believes to be unlawful…

    • 47886 Words
    • 192 Pages
    Good Essays
    Read More
  • Better Essays

    The Effect of SOX Section 404: Costs, Earnings Quality, and Stock Prices
    • 1454 Words
    • 5 Pages

    The Effect of SOX Section 404: Costs, Earnings Quality, and Stock Prices

    The Securities and Exchange Commission (SEC) Responsible for the application of the law THE SARBANES–OXLEY ACT (SOX) was passed in 2002 after a string of high profile corporate scandals. The law’s main goal was to improve the quality of financial reporting and to increase investor confidence, which requires companies to put in place and periodically test procedures that monitor the internal systems ensuring accurate financial reports Section 404 requires that managers report their findings in a special management’s report, and that an outside auditor attest to management’s assessment of the company controls.…

    • 1454 Words
    • 5 Pages
    Better Essays
    Read More
  • Good Essays

    Hcs/430 Health Care Case Study
    • 827 Words
    • 4 Pages

    Hcs/430 Health Care Case Study

    U.S. Department of Health and Human Services. (2012). Health Information Privacy. Retrieved from California. (2012) Retrieved from…

    • 827 Words
    • 4 Pages
    Good Essays
    Read More
  • Good Essays

    HIPAA CIA And Safeguards
    • 599 Words
    • 3 Pages

    HIPAA CIA And Safeguards

    HIPAA, CIA, and Safeguards Medical data are increasingly computerized, which means, inevitably, medical data are increasingly subject to the risks associated with computer security, namely: •Confidentiality: data revealed to people not authorized to see them •Integrity: unauthorized changes to data, intentional or otherwise •Availability: access to data denied by persons or events…

    • 599 Words
    • 3 Pages
    Good Essays
    Read More
  • Powerful Essays

    Hippa Privacy
    • 1433 Words
    • 6 Pages

    Hippa Privacy

    Privacy is the right of an individual to keep his/her individual health information from being disclosed.…

    • 1433 Words
    • 6 Pages
    Powerful Essays
    Read More
  • Good Essays

    Releasing Protected Health Information
    • 1028 Words
    • 5 Pages

    Releasing Protected Health Information

    The Health Insurance Portability and Accountability act of 1996 or HIPAA, was put in place as an attempt to reform health care during the Clinton administration by making it possible for workers, of any profession, to change jobs regardless if the worker, or any member of their family, have a pre-existing medical condition, decreasing paperwork which is associated with the processing of health claims, and by reducing health care abuse and fraud, and by assuring the privacy and security of health information. HIPAA’s standards for privacy of individually identifiable health information or privacy rule includes restrictions which protect the confidentiality and security of health information, and determines a criterion to protect the confidentiality of individually identifiable health information that is maintained or transmitted through electronic means in association with certain administrative and financial transactions such as electronic transfer of health insurance claims. The covered entity, in most cases, is required to obtain an individual’s authorization prior to disclosing any health information. And in most circumstances the patient or a legal representative of the patient controls the disclosure of PHI to any third party.…

    • 1028 Words
    • 5 Pages
    Good Essays
    Read More
  • Powerful Essays

    Privacy And Security In Healthcare
    • 1261 Words
    • 6 Pages

    Privacy And Security In Healthcare

    This rule requires the covered entity to promptly notify individuals and the Secretary of the HHS of the loss, theft, or certain other impermissible uses or disclosures of unsecured PHI. Health care providers must also promptly notify the Secretary of HHS if there is any breach of unsecured protected health information if the breach affects 500 or more individuals, and notify the media if the breach affects more than 500 individuals of a State or jurisdiction.…

    • 1261 Words
    • 6 Pages
    Powerful Essays
    Read More
  • Good Essays

    Privacy In Healthcare
    • 457 Words
    • 2 Pages

    Privacy In Healthcare

    The health information probability and accountability act has five sections that hold health professionals accountability. Title two: fraud and abuse /administrative simplification are in place to protect the security and privacy of their patients. Title two also improves the efficiency of the business process, which decrease cost. All health care facility has to meet the covered entities which includes a health plan, healthcare provider, and a healthcare clearinghouse. HIPAA address covered transactions such as claims, payments, eligibility, and more. However, there are some exceptions to the covered entity rule for the health care facilities that have less than twenty- five employees. HIPAA has put more emphasis on security and privacy which has changed the processes on how HIM professionals deal with patient’s health information. Transaction and code sets are rules that are another part of the HIPAA regulations which was designed to put a standard on the transactions performed by healthcare facilities, which affected the supply of electronic transactions. Another rule is the privacy rule which was put in place to control how PHI can be used by covered entities. Privacy and security was once taking care of the state level but this became a huge problem which cause the federal government to get involved. Even though, privacy and security has all ways been a priority it has become even more important that the HIM professional take the privacy and security of every patient with care and…

    • 457 Words
    • 2 Pages
    Good Essays
    Read More
  • Powerful Essays

    Professional Regulations and Criminal Liabilities
    • 1599 Words
    • 7 Pages

    Professional Regulations and Criminal Liabilities

    Providers of health care should be acquainted with the rules and regulations that guide HIPAA and the subsequent violations. Information is necessary to provide adequate and correct patient care. The guidelines to protect patient privacy should be followed but are open for interpretation. Providers should be steered by professional principals and ethics (Lo, Dornbrand, Dubler 2005). Health care providers must understand the difference between privacy and confidentiality. Privacy is the right of individuals to keep personal information restricted. Patients decide who has access to their information. Confidentiality is how…

    • 1599 Words
    • 7 Pages
    Powerful Essays
    Read More
  • Satisfactory Essays

    Effect of Unethical Behavior Article Analysis for Accounting
    • 340 Words
    • 2 Pages

    Effect of Unethical Behavior Article Analysis for Accounting

    The Sarbanes-Oxley Act of 2002, requires public companies to certify the adequacy of their internal controls for financial reporting purposes. Because of the Sarbanes –Oxley Act of 2002 companies are required to fully comply with their certification and reporting obligations and responsibilities by assuring that any financial…

    • 340 Words
    • 2 Pages
    Satisfactory Essays
    Read More

Related Topics