1.The HIPAA privacy and security rules provide federal protection for individually identifiable health information. Consider a physician practice that is transitioning from being paper based to electronic medical records. The receptionist area contains both hanging folders and the desktop computer on which the practice management system runs. During the transition, a patient’s health information (valued asset) will exist in two states: on paper in a hanging folder and in an electronic record on a computer.

• Identify and evaluate the risks for each state in terms of:
  • Threats
  • Vulnerabilities
  • Probability of a breach (low, medium, or high).
• In your answer include a discussion of authentication, integrity, and accountability.

Guided response: Your initial post should be a minimum of 200-250 words.

• Utilize a minimum of two scholarly sources

2.The system development lifecycle (SDLC) is an ongoing process that does not end when a new health information system is implemented. The SDLC is dependent on many different stakeholders. In your response,

• Compare and contrast the stages of the life cycle
  • Include the key factors that differentiate the stages.
• From you research, provide two specific examples of each stage in the cycle.
• What resources would you use in the planning of a replacement for the information system?

Guided response: Your initial post should be a minimum of 200-250 words.

• Utilize a minimum of two scholarly sources, excluding the textbook.
• Sources should be cited in APA format,