1. Patient Record System Team A DBM/381 February 4, 2013 John Italiano

2.  Standard Data collection  Risks  Considerations  Cost  Management Controls  Continuity Plans  Rationale on Forms, Queries, and Reports Introduction

3.  Protocols  Standard Formatting  Collection Exchange  Storage  Terminologies Health Care Data Collection Standards

4.  Inappropriate Access  Record Tampering  Malicious Hacking  Corruption of Data Privacy and Security Risks

5. Management Considerations  System Upgrading  Staff Participation  Destruction and Retention Requirements

6. Cost of Implementing the Design  Initial and Controlling Costs  Development Costs  Software/Hardware  Support and Maintenance

7.  Data Ownership  Incentives and benefits of changing controls  Rights and responsibilities  Authority for system modifications  Database systems that solve problems caused by the separation of ownership from use Data Management Controls

8.  Protection Controls  Conceptual  Query Restriction  Data Perturbation  Output Perturbation Data Management Controls

9.  Retention and Destruction requirements  Retention Policies  Privacy officer who is aware of the database schema  Ensuring that sensitive information is removed from a database as soon as it has outlived its purpose

10.  Components of disaster recovery plan  Resources  Communication Plan  Recovery Steps  Backing up and Restoring Data  Simple Data Backup Process  Full Data Backup Process Disaster Recovery Plans

11. Disaster Recovery and Business Continuity Plans  Components of Business Continuity Plan  Resources  Communication Plan  Recovery Steps  Impact on Operations  Downtime Procedures

12.  Easy tracking  Efficient  Quality improvement Rational for the Forms, Queries, and Reports

13. Adam, N. R., & Wortman, J. C. (1989, December). Security-Control Methods for Statistical Databases: A Comparative Study. ACM Computing Surveys, 21(4),. Retrieved from http://www.utdallas.edu/~muratk/courses/privacy08f_files/stat_database_sec.pdf FAO Corporate Document Repository. (1999). Data Management. Retrieved from http://www.fao.org/docrep/003/X2465E/x2465e0a.htm http://www.fao.org/docrep/003/X2465E/x2465e0a.htm Health Care Data Standards (2012). Retrieved February 2, 2012 from http://www.nap.edu/openbook.php?record_id=10863&page=127 http://www.nap.edu/openbook.php?record_id=10863&page=127 FEMA. (2012). Business Continuity Plan. Retrieved from http://www.ready.gov/business/implementation/continuityhttp://www.ready.gov/business/implementation/continuity Microsoft. (2013). Planning for Disaster Recovery. Retrieved from http://msdn.microsoft.com/en- us/library/ms178094(v=sql.105).aspxhttp://msdn.microsoft.com/en- us/library/ms178094(v=sql.105).aspx Microsoft. (2012). Recovery Model Overview. Retrieved from http://msdn.microsoft.com/en-us/library/ms189275(v=sql.105).aspx Records Retention in Relational Database Systems. (2008). Retrieved from http://pdf.aminer.org/000/300/554/natural_joins_in_relational_databases_with_indefinite_and_maybe_information.pdf Recovery Database Network. (2013). Business Continuity. Retrieved from https://www.recoverydatabase.net/business-continuity References