Operation security

You need to write a report describing some of the risks associated with not having all the security items in your healthcare facility. He needs you to research a generic risk management policy template and use that as a starting point to move forward. He also asked you to search for risk outcome examples from organizations similar to theirs.
  You realize that your organization does not have much in the way of an information security strategy, and is missing many of what you think are critical components. Your organization is compliant with the Health Insurance Portability and Accountability Act (HIPAA) and follows other external compliance requirements.

Requirements

1. Research templates, and look for risk outcome examples from organizations of a similar type as your organization.

2. Identify the risks associated with the current position your organization is in, and how your organization can mitigate risk by using information security systems policies.

3. Include an introduction explaining the following: Who? What? When? Why?

4. Be sure to add a rationale detailing how risks can be mitigated.

5. 280 words in proper APA format and references.