Risk Analysis and Management Project, Part 2

profileDonald37
LearningteamARMP.docx

<Project Name>

Risk Management Plan

Version <1.0>

<mm/dd/yyyy>

VERSION HISTORY

Version #

Implemented

By

Revision

Date

Approved

By

Approval

Date

Reason

1.0

Leticia Ratliff

01/24/2019

<name>

<mm/dd/yy>

Initial draft

1.1

<Author name>

<mm/dd/yy>

<name>

<mm/dd/yy>

<reason>

TABLE OF CONTENTS

1 Introduction 1

1.1 Purpose 1

2 r isk Management Procedure 1

2.1 Process 1

2.2 Risk Identification 1

2.3 Risk Analysis 1

2.3.1 Qualitative Risk Analysis 1

2.3.2 Quantitative Risk Analysis 1

2.4 Risk Response Planning 1

2.5 Risk Monitoring and Controlling 1

3 Tools a nd Practices 1

R isk Management Plan Approval 2

Appendix A: References 3

Appendix B: Key Terms 4

1. Introduction

1.1 Purpose

The purpose of this risk analysis and risk management plan is to evaluate the proposed adoption of an electronic health record system with the option for a patient portal within a large physician office. HIPAA/HITECH require that we meet certain standards for the use, security, and privacy of patient information. Risk can be a positive or negative response to the adoption of this system. Some of the positive risks we will face include the incentives offered by the government for adopting such technology and the ability to provide higher quality of care to our patients. Some of the negative risks we face include loss of time and income if the system takes longer than anticipated to put into practice and the potential penalties if any of our employees fail to comply with standards of use and security protocols. This analysis of risk pertaining to the patient portal will explore the issues of information safety and security, as well as accessibility. By the end of this plan our organization should have a better understanding of the regulatory requirements for this type of system as well as the legal and environmental risks associated with it. Addressing the potential for these risks will help us understand how this system will benefit our organization as well as what steps we need to take to make sure this transition a positive one, ensuring our employees are prepared to do their part and comply with the standards set forth through federal regulations.

2. Risk Management Procedure

2.1 Process

[Summarize the steps necessary for responding to project risk.]

2.2 Risk Identification

[Summarize the steps necessary for identifying risk.]

2.3 Risk Analysis

[Summarize the risk analysis process.]

2.3.1 Qualitative Risk Analysis

[Describe the qualitative risk analysis process used.]

2.3.2 Quantitative Risk Analysis

[Describe the quantitative risk analysis process used.]

2.4 Risk Response Planning

[Describe the risk response planning process used.]

2.5 Risk Monitoring and Controlling

[Describe the risk monitoring and control process.]

3. Tools and Practices

[Make reference to the file name containing the risk register for the project.]

Risk Management Plan Approval

The undersigned acknowledge they have reviewed the risk management plan for the <Project Name> project. Changes to this plan will be coordinated with and approved by the undersigned or their designated representatives.

Signature:

Date:

Print Name:

Title:

Role:

Signature:

Date:

Print Name:

Title:

Role:

Signature:

Date:

Print Name:

Title:

Role:

Signature:

Date:

Print Name:

Title:

Role:

Appendix A: References

Appendix B: Key Terms

[Insert terms and definitions used in this document. Add rows to the table as necessary. Follow the link below for definitions of project management terms and acronyms used in this and other documents.]

The following table provides definitions for terms relevant to the risk management plan.

Term

Definition

[Insert term]

[Provide a definition of the term used in this document.]

[Insert term]

[Provide a definition of the term used in this document.]

[Insert term]

[Provide a definition of the term used in this document.]