Question

Consider a university medical services department.

A1.1. Consider a university medical services department. Describe what could be the typical information items that is kept within the information system of such a department.

A1.2. What should be included in a typical physical vital records inventory specifically for at least one type of data records at this type of medical services department which is needed for business recovery planning.

Answer 1

1. Medical Services Department of a university has following data in its information system.

(a) Database of the students, faculty members and staff.

(b) Medical records of those who visited and got treated at the facility.

(c) Database of external medical practitioners and hospitals to deal with emergency.

(d) Insurance records of students and staff.

(e) Record of incidents of communicable diseases and the mitigation strategy followed.

A1.2

The most important database that is vital to the medical healthcare facility is the confidential information of the students and staff which can cause significant damage if it is lost, misplaced, stolen and accessed in unauthorised manner. Vital records inventory should have following systems in place to prevent such events.

(a) Fixation of responsibilities for data management and protection.

(b) Backup for all data available.

(c) Standard operating procedure to deal with disasters ( Disaster recovery plan)

(d) Protection against cyber threats.

(e) Auditing for ensuring compliance to the norms.