1

Running head: REFLECTIVE PRACTICE WORKSHEET SUMMARY

Reflective Practice Worksheet Summary

Julie Khmelchenko

HCIN – 544 Advanced Health Care Information Management

Tenille Grifford, RN MSN

2
REFLECTIVE PRACTICE WORKSHEET SUMMARY
Reflective Practice Worksheet Summary

Reflective Practice Worksheet helped me to identify three aspects of the privacy and

security activities that can be improved upon and then aided me in developing an action plan for

establishing goals and actions to achieve them. I gained knowledge through engaging my critical

thinking in finding incompatibilities within the practice. Furthermore, I had time to reflect on

them, find influencing factors, draw learning points for myself, and come up with action plans to

comply with HIPAA regulations and prevent potential ePHI breaches. The three aspects that I

focused on were ePHI data in transit without capabilities to track it, the extensive timeframe for

computer screen before it logged off after inactivity, and the policy that allows employees to use

personal phones to access ePHI via a web application.

It was vital for me to understand the policies and procedures for privacy and security

before suggesting any changes. After reflecting on specific situations, I was able to come up with

action plans that will comply with HIPAA regulations and meet the needs of the practice and

predicted possible obstacles the clinic might face. Actions I will implement for three aspects I

have mentioned before is by suggesting to sign a contract with a company to assist with tracking

encrypted data while in transit, which will help determine if ePHI has been accessed, altered, or

deleted. Secondly, speak with PSO about changing policy to reduce the timeframe to 7 minutes

before a computer screen automatically logs off when not in use. Thirdly, suggest PSO to

provide company's mobile phones to BA's that work from home to reduce the chances of ePHI

breaches. In the future, to make a more compelling case, I would do extensive research on

cybersecurity companies and their services, so I can provide the best options for the clinic to

choose from. Moreover, I will compile facts of data breaches correlating with every minute a

computer is logged in but not in use. Lastly, I will present the optimal phone providers that can
3
REFLECTIVE PRACTICE WORKSHEET SUMMARY
provide the best rates for small clinics. With every reflective practice activity, I will gain a better

understanding of my actions, realize my strengths and weaknesses, and create a plan on what

skills I need to work more to succeed in future projects.