Question

Which compliance laws or standards does the health care organization mentioned in the handson steps have to comply with (consider these: health insurance portability and accountability act [hipaa], gramm-leach-bliley act [glba], and family educational rights and privacy act [ferpa])? how does this impact the scope and boundary of its it risk management plan?

Answer 1

All healthcare organizations must follow the compliance law set up by HIPPA. HIPPA means Health Insurance Portability and Accountability Act. This was passed in 1996 and ensures a standard across the nation to protect not only medical records, but other personal health information. Due to having to ensure that all areas are protected, it has a large impact on the scope and boundary of the organizations IT Risk Management Plan.