PROJECT BRIEF

BACKGROUND

This project for Bismarck-Burleigh Public Health (BBPH) supports the identification, development, and implementation of key policy and data governance frameworks for electronic health records and protected health information. A key responsibility of BBPH is the collection, maintenance, and transmission of such efforts; without cybersecurity frameworks and HIPAA compliance, there are risks to these key systems. 

AIMS

This project addresses the urgent mandate to (1) strengthen BBPH’s security posture, (2) formalize fragmented policies, and (3) build long-term sustainability.

METHODOLOGY

The scope of this initiative includes (1) assessing current HIPAA compliance and cybersecurity gaps in data storage, (2) conducting a literature review of national best practices in data governance, (3) comparing BBPH’s practices with peer cities and counties through case study analysis, (4) engaging stakeholders through interviews to surface internal perspectives, and (5) developing prioritized policy recommendations, staff training, and awareness modules to support consistent implementation. All methods allow BBPH to take the following steps toward integrated modern practices in various ways, enabling sustainable long-term outcomes.

DELIVERABLES

Key deliverables include (1) a literature review outlining national practices, (2) policy recommendations and verbiage for BBPH to formalize through the Policy Committee, and (3) a staff training skeleton and modules.

IMPACT AND FUTURE WORK

The impact of this work is significant: implementing policies and complementing them with key training enables long-term development of HIPAA and data governance modernization. These recommendations will empower BBPH and its stakeholders to be leaders in compliance. Additional steps are critical, including following up on policy implementation and training outcomes; as local and national data governance frameworks are developed and adopted, they can modernize outcomes.