The Individual Midterm Report will entail the development of a detailed report related to the topics below. Students are required to complete and submit this report. You may use the course resources for some of your resource material. It is expected that you will do research outside of the content posted in this course.   As such, the Individual Midterm Reportmust be unique and should not be a restatement of items from the course materials. The use of APA is required for formatting for your report, citing your in-text citations, and providing full references at the end of the report.

Note: All papers will be run through Turn-it-in. Any plagiarized papers or papers with a 20% or greater ‘similarity score’ (indicating that 20% or greater of the paper was copied) will receive a 0.

Individual Midterm Report Topics (pick one for your focus):

1. Comparison and contrast between TCP/IP and the OSI model

Requirements for the Individual Midterm Report include:

• Write a 4 to 6-page paper (1400 to 2100 words at 350 words per page/average) on the selected technology topic. The required 4 to 6 pages of your report does not include the page count for the cover page, front matter (Table of Contents), Back matter (appendix items), and reference page.
• A minimum of THREE outside references is required for your work.  Use peer-reviewed work (e.g., journals, conference proceedings, industry papers, etc.).  Peer-reviewed work refers to articles written by experts, which are reviewed by several other experts in the field before the article is published in the journal in order to ensure the article’s quality.  Please DO NOT use popular press items (e.g., Time Magazine, Forbes Magazine, etc.), which are not aligned with academic work.
• Use APA formatting in your paper.
• AVOID direct quotes. Instead, paraphrase and cite (see APA regarding this). Remember, direct quotes are typically done for seminal research, so limit the use of quotes in your submission.
• In addition, provide an introduction and a conclusion in your paper.
• The paper must follow a logical flow, so working from an outline is strongly recommended.

Read the following information about a typical dental practice:

• Community Dental has two offices in the same city — the North office and the South office. These offices offer the same dental services to patients. Patients can make appointments to either office at their convenience to see the dentist of their choice. Both offices are similarly equipped.
• The professional staff includes the dentists, hygienists, dental mechanics, and administrative staff (receptionist, billing clerk, and office manager).
• Each Community Dental office has a waiting area served by a receptionist who uses a computer to check in patients, schedule one of the examination rooms, and answer the phone. The waiting room has a door opening to the outside. A second door admits patients into the rest of the facility. Background music plays inside the waiting area. There is also a large aquarium on display.
• Each examination area is partitioned off from the adjacent ones. Each has a computer and LCD screen used to pull up patient information and record new dental data such as x-ray interpretations, examination and test results, and procedures done for the patient. A low-level sound masking system is installed in this area.
• After their treatment, the patient visits the billing clerk’s desk, which of course has a computer and a printer. Here patients pay (cash co-pay, credit card, or check), insurance information is verified, and an appointment is made. This clerk also mails out postcard appointment reminders and answers the phone.
• The Community Dental dentists share a private office that has a computer and a printer. Here they can review patient data, access the Internet, and exchange email with their patients, colleagues, and acquaintances.
• A database server containing patient data sits in a closet, next to a small tape library used for backup. Next to it sits a VPN server, firewall/router, and cable modem connected to the Internet. The VPN server accepts incoming connections from the dentist’s home computers. It also provides a permanent VPN connection between the North and South Offices. In this way, all patient data is available at all times at either office.
• Most patient data is stored electronically on the database server, but some data such as x-rays and third-party labs results are still filed in physical form. Community Dental also depends on third party service providers to build crowns, braces, false teeth, soft dental protectors, and such. Information is exchanged with service providers using telephone, fax, letter, and email.
• The network infrastructure’s management and maintenance are outsourced.
• Community Dental also maintains an informative website to advertise its practice. The site is remotely hosted.

Answer the following questions incorporated into an  format. Make any sensible assumptions necessary in order to continue your analysis (stating them as needed for clarity). You are welcome to use the discussion board to share your assumptions with others in the class:

1. What is all the electronic and non-electronic private health information (ePHI) that is stored, processed, and transmitted at Community Dental’s two offices?
2. Assess the practice’s organization. Where are organizational processes most likely to be HIPAA compliant? What changes should be made to move the practice closer to compliance in its business operations?
3. Assess the practice’s physical and technical safeguards. Where are they most likely HIPAA compliant? What changes should be made to move the practice closer to compliance?
4. Community Dental exchanges data with external service providers and uses a third party to manage its IT infrastructure. What administrative and organizational safeguards should the practice expect these providers to adhere to?

Submit your in the usual double-spaced APA-styled report. Content should be a minimum of four double-spaced pages, APA style followed (title page, abstract, table of contents, and references section) to meet expectations.

• Answers contain sufficient information to adequately answer the questions
• No spelling errors
• No grammar errors

Part 2A: Major Events Documentation

Scenario: You visit a retail establishment, shop around, and finally carry several products to one of the point of sale (POS) terminals visible around the store. You produce a credit card and the salesclerk processes the transaction, bags your goods, and hands you the receipt. On your way to the exit, a store employee asks to see your receipt and inspects the contents of the store bag. Document each of the major events just described and then describe the events in terms of the PCI compliance standard. Include this report in your assignment.

Part 2B: PCI Compliance

This part will cover PCI. Please refer to Figure B-1A in your responses.

Respond to and address the following:

1. Suppose HGA’s data server, depicted in Figure B-1, stored cardholder data in the private databases. What steps should be taken to protect that data in order to be PCI compliant?
2. HGA’s data server has network connectivity. Assuming that cardholder data is transmitted across these networks, describe how data should be protected in transmission.
3. Users are located at various sites connected to the HGA network. Suggest appropriate access controls to restrict unauthorized users from looking at cardholder data.
4. The PCI specification notes that all systems and network devices connected to a system that stores, transmits, or processes cardholder data is in scope and must comply with PCI specifications. To avoid having the whole network subject to PCI specifications, how would you partition the network to reduce the scope of compliance?

 Submit the usual double-spaced APA-styled report. At least four pages of material are expected beyond the title page, table of contents, abstract, and references page. 

In order to complete assignment #6 you will need to answer the below questions. Please complete the questions in a Word document and then upload the assignment for grading. When assigning a name to your document please use the following format (last name_Assignment #6). Use examples from the readings, lecture notes and outside research to support your answers. The assignment must be a minimum of 1-full page in length with a minimum of 2 – outside sources. Please be sure to follow APA guidelines for citing and referencing source. Assignments are due by 11:59 pm Eastern time on Sunday.

Chapter 10Immunomedics was alerted that there was some negative buzz about the company in a chat room. The poster used a pseudonym, and therefore the company was unable to identify the poster for lawsuit purposes. The only information the company could ascertain was the poster's ISP. So the company decided to subpoena the ISP for identity information of the poster in order to file suite against the poster. How should the courts handle these cases, where the company's complaints may, or may not rise to the level of an actionable legal claim?Chapter 11Please read Question #5 on page 362 and then answer the following questions.Should Craigslist be subject to liability for FHA violations? Why or why not? Cite appropriate legal principles when explaining your answer. 

 Question 5 pg 362

Users of the popular Internet website Craigslist are able to post advertisements for housing that permit statements regarding the preference, limitation, or discrimination of others based on race, religion, sex, or family status. The Fair Housing Act (FHA), however, prohibits making, printing, or publishing a notice, statement, or advertisement for sale or rental of dwellings indicating preference, limitation, or discrimination based on protected classes. As such, Chicago Lawyers Committee for Civil Rights Under Law, Inc. brought suit against Craigslist alleging a violation of the FHA. In defense, Craigslist claimed that it was immune from liability based on Section 230(c)(1) of the CDA, which protects interactive computer services from liability for unlawful third-party content. Should Craigslist be subject to liability for FHA violations? Why or why not? Cite to appropriate legal principles when explaining your answer. 48