Preview

Lab: Align Compliance Requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA

Satisfactory Essays
Open Document
Open Document
271 Words
Grammar
Grammar
Plagiarism
Plagiarism
Writing
Writing
Score
Score
Lab: Align Compliance Requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA
Lab 6
Align compliance requirements to FISMA, SOX, HIPPAA, GLBA, PCI DSS and AICPA
Hyung Ryu
ITT Technical College, Everett Campus

Author Note This assignment is being submitted on July 22, 2014, for Even Anderson introduction to project management PM3110

1. What are the five principles of the AICPA Trust Services & principles criteria?
2. What does the AICPA Trust Services & Principles Criteria recommend for concerning inactive user accounts on a web site?
3. With what section of SOX would the IT professional deal the most and why?
4. In HIPAA, under what scenario is a healthcare provider required to notify all patients and the department of health and human services when a security breach is discovered?
5. Where would someone go in order to find the quarterly and annual reports for a publicly-traded company to verify SOX compliance?
6. Describe the various levels of PCI DSS compliance as defined by VISA
7. In HIPAA, what information is protected and who is covered by the Security Rule?
8. For the 12 core requirements of the PCI DSS standard, what are the 3 steps or phases for assessing and reviewing compliance with the PCI DSS standard?
9. What are the fines associated with violating HIPAA compliance requirements?
10. What are the PCI DSS Procedures used when auditing an organization for security?
11. What are the 11 titles of mandates and requirements for SOX compliance?
12. What purpose may COBIT serve to help maintain compliance for regulations such as Sarbanes-Oxley?
13. What is the Safeguard Rule as it relates to GLBA?
14. What is the purpose of the PCI security audit procedures?
15. Describe the process to still obtain/maintain PCI DSS compliance even though a required security control/process is unrealistic for an organization?
Continue Reading
View Writing Issues

You May Also Find These Documents Helpful

  • Powerful Essays

    Sarbanes Oxley Memo
    • 1426 Words
    • 6 Pages

    Sarbanes Oxley Memo

    SOX is administered by the Securities and Exchange Commission (SEC). The SEC sets deadlines for compliance and publishes rules on requirements. The Securities and Exchange Commission (SEC) is the department to which all publicly-traded companies, effective since 2004, are required to submit annual reports of the effectiveness of their internal accounting controls. The SEC has broad authority over all aspects of the securities industry. This includes the power to register, regulate, and oversee brokerage firms, transfer agents, and clearing agencies. Along with them, is the FASB.…

    • 1426 Words
    • 6 Pages
    Powerful Essays
    Read More
  • Best Essays

    Sarbanes Oxley Act
    • 3132 Words
    • 13 Pages

    Sarbanes Oxley Act

    These two practices were GAAP, which stands for Generally Accepted Accounting Principles and GAAS, which stands for Generally Accepted Auditing Standards. Creditability was the basic foundation for both of these principles, but had to be enforced with the Sarbanes Oxley Act when corporate scandals became prevalent. In order to gain a better understanding of SOX, which has superseded the rules of GAAS and GAAP, an analysis was conducted on four issues that relate to the Act. The four issues at hand are: the CEO’s and CFO’s of public companies, Section 404 on internal control, the main advantages and disadvantages, and what changes should be made to SOX. Finally, a discussion about how legislation cannot guarantee the accuracy of public financial statements will be examined. Along with this issue, Team Nitpickers will dig deeper and look into reasons as to why CEO’s and CFO’s are paying closer attention to this law.…

    • 3132 Words
    • 13 Pages
    Best Essays
    Read More
  • Satisfactory Essays

    1.2 Explain How HIPAA Protects Patients Electronic Protected Health Information
    • 351 Words
    • 2 Pages

    1.2 Explain How HIPAA Protects Patients Electronic Protected Health Information

    In this week’s assignment, you are asked to research HIPAA and how it has provided…

    • 351 Words
    • 2 Pages
    Satisfactory Essays
    Read More
  • Satisfactory Essays

    HIPAA Security Rule
    • 170 Words
    • 1 Page

    HIPAA Security Rule

    In the administrative safeguards proper personal is put in place to ensure management and employees are trained properly on HIPAA, and provide limited access on patient information in the workplace. In the physical and technical safeguards certain controls are available among…

    • 170 Words
    • 1 Page
    Satisfactory Essays
    Read More
  • Powerful Essays

    Ethical Considerations (HIPAA) For Workers Compensation
    • 81 Words
    • 1 Page

    Ethical Considerations (HIPAA) For Workers Compensation

    HIPAA allows patients’ health information to be disclosed under some circumstances, such as 1) to meet law requirements; 2) for reporting of abuse, neglect, and domestic violence; 3) for monitoring of healthcare operations; 4) to be presented as evidence in legal proceedings; 5) for assistance with police investigation; 6) for medical examinations and funerals; 7) for organ donation; 8) for research; 9) to avoid a significant threat to health or safety; 10) for workers’ compensation payments; 11) to execute government…

    • 81 Words
    • 1 Page
    Powerful Essays
    Read More
  • Satisfactory Essays

    Lab 9
    • 1001 Words
    • 3 Pages

    Lab 9

    7. In order to perform a PCI DSS compliance audit on your e-commerce website, what should you incorporate into Requirement #6 regarding “Develop and Maintain Secure…

    • 1001 Words
    • 3 Pages
    Satisfactory Essays
    Read More
  • Good Essays

    HIPAA Privacy Manual
    • 47886 Words
    • 192 Pages

    HIPAA Privacy Manual

    engaging in reasonable opposition to any act or practice that the person in good faith believes to be unlawful…

    • 47886 Words
    • 192 Pages
    Good Essays
    Read More
  • Good Essays

    Hcs/430 Health Care Case Study
    • 827 Words
    • 4 Pages

    Hcs/430 Health Care Case Study

    U.S. Department of Health and Human Services. (2012). Health Information Privacy. Retrieved from California. (2012) Retrieved from…

    • 827 Words
    • 4 Pages
    Good Essays
    Read More
  • Good Essays

    HIPAA CIA And Safeguards
    • 599 Words
    • 3 Pages

    HIPAA CIA And Safeguards

    HIPAA, CIA, and Safeguards Medical data are increasingly computerized, which means, inevitably, medical data are increasingly subject to the risks associated with computer security, namely: •Confidentiality: data revealed to people not authorized to see them •Integrity: unauthorized changes to data, intentional or otherwise •Availability: access to data denied by persons or events…

    • 599 Words
    • 3 Pages
    Good Essays
    Read More
  • Powerful Essays

    Professional Regulations and Criminal Liabilities
    • 1599 Words
    • 7 Pages

    Professional Regulations and Criminal Liabilities

    Providers of health care should be acquainted with the rules and regulations that guide HIPAA and the subsequent violations. Information is necessary to provide adequate and correct patient care. The guidelines to protect patient privacy should be followed but are open for interpretation. Providers should be steered by professional principals and ethics (Lo, Dornbrand, Dubler 2005). Health care providers must understand the difference between privacy and confidentiality. Privacy is the right of individuals to keep personal information restricted. Patients decide who has access to their information. Confidentiality is how…

    • 1599 Words
    • 7 Pages
    Powerful Essays
    Read More
  • Good Essays

    Releasing Protected Health Information
    • 1028 Words
    • 5 Pages

    Releasing Protected Health Information

    The Health Insurance Portability and Accountability act of 1996 or HIPAA, was put in place as an attempt to reform health care during the Clinton administration by making it possible for workers, of any profession, to change jobs regardless if the worker, or any member of their family, have a pre-existing medical condition, decreasing paperwork which is associated with the processing of health claims, and by reducing health care abuse and fraud, and by assuring the privacy and security of health information. HIPAA’s standards for privacy of individually identifiable health information or privacy rule includes restrictions which protect the confidentiality and security of health information, and determines a criterion to protect the confidentiality of individually identifiable health information that is maintained or transmitted through electronic means in association with certain administrative and financial transactions such as electronic transfer of health insurance claims. The covered entity, in most cases, is required to obtain an individual’s authorization prior to disclosing any health information. And in most circumstances the patient or a legal representative of the patient controls the disclosure of PHI to any third party.…

    • 1028 Words
    • 5 Pages
    Good Essays
    Read More
  • Powerful Essays

    Hippa Privacy
    • 1433 Words
    • 6 Pages

    Hippa Privacy

    Privacy is the right of an individual to keep his/her individual health information from being disclosed.…

    • 1433 Words
    • 6 Pages
    Powerful Essays
    Read More
  • Powerful Essays

    Privacy And Security In Healthcare
    • 1261 Words
    • 6 Pages

    Privacy And Security In Healthcare

    This rule requires the covered entity to promptly notify individuals and the Secretary of the HHS of the loss, theft, or certain other impermissible uses or disclosures of unsecured PHI. Health care providers must also promptly notify the Secretary of HHS if there is any breach of unsecured protected health information if the breach affects 500 or more individuals, and notify the media if the breach affects more than 500 individuals of a State or jurisdiction.…

    • 1261 Words
    • 6 Pages
    Powerful Essays
    Read More
  • Good Essays

    Privacy In Healthcare
    • 457 Words
    • 2 Pages

    Privacy In Healthcare

    The health information probability and accountability act has five sections that hold health professionals accountability. Title two: fraud and abuse /administrative simplification are in place to protect the security and privacy of their patients. Title two also improves the efficiency of the business process, which decrease cost. All health care facility has to meet the covered entities which includes a health plan, healthcare provider, and a healthcare clearinghouse. HIPAA address covered transactions such as claims, payments, eligibility, and more. However, there are some exceptions to the covered entity rule for the health care facilities that have less than twenty- five employees. HIPAA has put more emphasis on security and privacy which has changed the processes on how HIM professionals deal with patient’s health information. Transaction and code sets are rules that are another part of the HIPAA regulations which was designed to put a standard on the transactions performed by healthcare facilities, which affected the supply of electronic transactions. Another rule is the privacy rule which was put in place to control how PHI can be used by covered entities. Privacy and security was once taking care of the state level but this became a huge problem which cause the federal government to get involved. Even though, privacy and security has all ways been a priority it has become even more important that the HIM professional take the privacy and security of every patient with care and…

    • 457 Words
    • 2 Pages
    Good Essays
    Read More
  • Satisfactory Essays

    Effect of Unethical Behavior Article Analysis for Accounting
    • 340 Words
    • 2 Pages

    Effect of Unethical Behavior Article Analysis for Accounting

    The Sarbanes-Oxley Act of 2002, requires public companies to certify the adequacy of their internal controls for financial reporting purposes. Because of the Sarbanes –Oxley Act of 2002 companies are required to fully comply with their certification and reporting obligations and responsibilities by assuring that any financial…

    • 340 Words
    • 2 Pages
    Satisfactory Essays
    Read More

Related Topics