Scenario: The IT department has just notified you of a computer security violati

Question

Scenario: The IT department has just notified you of a computer security violation. During their database audit, they found a nurse employee who had accessed her own electronic medical record 27 times the past 3 months to review her labs and dictations for her chronic condition. Sometimes she accessed the record herself, and sometimes she had other subordinate co-workers access her record.

The facility has strict rules concerning computer security violations. Administration wants her and any employee who assisted her terminated immediately. The nurse involved argues that it is not a violation: because she only accessed her own records, and since she owns her medical records she did not violate any security rules.

DQ1: Respond to the following question: Has the nurse violated any security rules? Be specific. Then determine if the employee and/or her subordinate should be terminated. Defend your response.

Explanation / Answer

Yes, the nurse has violated security rules because she is not allowed to access any data from the database even if she is accessing her own data, there is a designated team who is responsible for accessing such data and if anybody wants to access their data they need to raise a request to this team and after approvals are taken, the data can be accessed. She also had other workers who accessed her records which is not expected. In this case even there is a violation still instead of terminating, the concerned employees can be warned for being involved in such an activity and an undertaking needs to be signed which will state that if such an activity is repeated that may lead to termination. The employees should be made aware about the magnitude of data security and a violation cannot be entertained and this is a warning as this is their first time.

Related Questions

Navigate

• Browse (All)
• Browse S
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.