Prepared by: __Sasha Thomas______ Date: 03/31/2024 This system is aimed at daily

Prepared by: __Sasha Thomas______

Date: 03/31/2024

This system is aimed at daily needs of a medicinal office within a local community and facilitates the maintenance of patient data, financial and inventory operations. As well as that it assists in supporting interactions between staff members and patients. Moreover, this is a closed network which is maintained by an external IT service company and is located within the doctor’s clinic premises (Salim & Park, 2022). The access to the system is only available to authorized personnel.

a

This system is aimed at daily needs of a medicinal office within a local community and facilitates the maintenance of patient data, financial and inventory operations. As well as that it assists in supporting interactions between staff members and patients. Moreover, this is a closed network which is maintained by an external IT service company and is located within the doctor’s clinic premises (Salim & Park, 2022). The access to the system is only available to authorized personnel.

a

Categorization for: Local Doctor’s Office

Briefly describe system operation and purpose: (include general purpose, level/source of maintenance support, physical environment, sensitivity of information, access by public users)

Receptionists: Whether it is scheduling an appointment or managing the patient’s record, I work tirelessly on providing excellent services.

Nurses: Patients can use telemedicine service to access their medical records and the doctor can consult patients during appointments.

Doctor: The duties leans back on accessing and updating patient medical records, prescribing medications, and communicating with patients.

Billing Staff: Dealing with financial and insurance-related issues.

IT Support: Have a skilled professional regarding your maintenance and replacement.

Receptionists: Whether it is scheduling an appointment or managing the patient’s record, I work tirelessly on providing excellent services.

Nurses: Patients can use telemedicine service to access their medical records and the doctor can consult patients during appointments.

Doctor: The duties leans back on accessing and updating patient medical records, prescribing medications, and communicating with patients.

Billing Staff: Dealing with financial and insurance-related issues.

IT Support: Have a skilled professional regarding your maintenance and replacement.List roles of authorized users: (include basic and privileged users, any public/client access, etc.)

Using NIST SP 800-60 Vii, list 3-5 information types created, processed, or stored on this system:

Number Name Impact: C I A (L, M, or H)

Patient Health Information (PHI) Moderate Moderate Low

Medical Records High High Low

Appointment Schedules Low Low Moderate

Billing Information Moderate Moderate Low

Inventory Records Low Low Moderate

Reference

Salim, M. M., & Park, J. H. (2022). Federated learning-based secure electronic health record sharing scheme in medical informatics. IEEE Journal of Biomedical and Health Informatics, 27(2), 617-624.