Continuing to apply your role as a summer intern for the not-for-profit organization, you internship mentor has shared that they are very happy with your input. However, additional research needs to be conducted. Create a report that includes the following items:

1. Review the IoM's 1999 and 2001 reports under Module 7 Resources.

• Compare and contrast the recommendations in these reports.
• Evaluate the outcomes of their implementation and assess their impact on healthcare quality improvement (familiarize yourself with Quality Improvement points).
• Ascertain the consequences of not using HIT and frame your recommendations for improvement of healthcare quality using HIT?

2. HIPAA (1996) and HITECH (2009) Acts contain provisions for the protection of health information both by Covered Entities (CEs) and Business Associates (BAs).

• Compare Security Rule provisions for CEs and BAs in both Acts?
• Identify the organization responsible for monitoring its compliance by providers and explain its mode of operation. Ascertain the value of the Security Rule provisions for electronic health records.
• Finally, assess implications for noncompliance of the Security Rule provisions by healthcare organizations?

3. Develop an example case that can be used in the presentations where a Chief Information Security Officer (CISO) at a local healthcare facility has not adopted any Password use policy yet.

• Delineate the role of CISO in the implementation of the password use policy.
• Offer approaches to developing a Password use policy for this organization.