Doctor's Office Visit Narrative Doctor Healy and her administrative assistant Mrs. Helper run a doctor's clinic. Dr. Healy treats patients and Mrs. Helper handles all of the administrative work and manages all the information. Dr. Healy also employs Mrs. Buchbinder, an accountant, who works onsite twice a week and takes care of all accounting needs of the office (including billing). When a patient comes to the office, they approach Mrs. Helper who searches for and finds the patient's record in the medical office AIS database and verifies that all the information is correct and up-to-date. She also records today's visit in the medical office AIS. After that, the patient walks to an examination room where they wait for Dr. Healy. Upon entering the exam room, Dr. Healy reviews the patient's recent history in the electronic medical record and asks the patient about their current concerns. As the patient talks, Dr. Healy types in the concerns, and the information is added to the patient's medical record. After conducting her examination of the patient, the doctor uses her professional judgement and information from the online resource "MedWEB" to propose the best course of action for the patient. She types in her treatment plan, and it is added to the patient's medical record. The doctor also types in administrative information about today's visit, including the medicines she will prescribe (if any) to the patient. The doctor prints a summary of the visit, hands it to the patient, and walks the patient out. The administrative assistant accesses the information in the system. She marks the visit as complete and ready for billing. If Dr. Healy prescribed any medicines to the patient, then Mrs. Helper faxes the new prescription to the patient's pharmacy on file. 1. Read the narrative and break the process down step-by-step using the table (you should have AT LEAST one row per employee). 2. After reviewing this process, write at least three sentences about an area you feel technology could further improve the efficiency or accuracy of this process. 3. There exists a data integrity risk through unauthorised editing of patient data. The same administrative assistant is able to edit the information for a patient as the one who checks the patient in and out. Conduct a risk assessment (cost benefit analysis) and in a paragraph below explain your conclusion. Should a control be implemented to address this risk? If not, why? If so, what control and why? (Hint: Discuss cost of the risk vs cost of the control, likelihood and impact of the risk)