Assignment:

Answer the following to the best of your ability in complete sentences with proper spelling and grammar. Be sure to elaborate on your answers and provide support for each of your statements. Format your answers in blue font.

I. HIPPA

1. Explain the main parts of HIPPA.

2. Why is health care information sensitive?

3. List 5 examples of privacy data elements for HIPPA as defined in the Privacy Rule.

4. Discuss the scope of HIPAA in the context of small doctor's and dentist's offices. Do these offices have to comply with the same HIPAA regulations as large health institutions? What challenges do the small offices face?

5. Describe the role of state law in protecting the confidentiality of medical records.

II. Corporate Information Security and Privacy Regulation

Refer to the attached file Sarbanes-Oxley Act if you need further information.

I want you to play the role an internal auditor and you are assigned the task of creating a specific checklist to ensure compliance with Section 404 of the SOX Act. You will need to write an executive summary highlighting compliance details of Section 404 and the need for an ongoing policy to ensure compliance. This summary will be submitted to executive management.