Tech 50800: Champion/Define Phases DATE: PRESENTER: DARON SAUNDERS

Process Improvement: Improving Data Security in Healthcare  Security is not absolute, meaning there is always room for improvement in regards to securing organizational and customer data. Data security is one of the most vital, fundamental components of a well-functioning healthcare organization. To sustain confidentiality of patients, companies must have high-level security measures and processes in place within the organization and the information systems to minimize the risk of threats and breaches.

Content Overview  Project Selection Tools  Project selection matrix and ranking  Project charter  Business Case  Scope  Problem Statement  Goal Statement + Deliverables  Project Schedule  Key Metrics  Principle Stakeholders  Project Stakeholder Analysis  Voice of the customer (VOC) Analysis  SIPOC  KPOVs  CTQ Tree

Project Selection Matrix

Business Case In scope: security threat detection time is in the scope, along with the prevention of cyberattacks within the information systems. Out of scope: profits to the healthcare organization (CareFirst) is out of scope.

Problem Statement  CareFirst was the target of a cyberattack within the last year and many customers may have been affected by the breach. The breach allowed very limited access to attackers, yet the entire attack could have been prevented if detected early enough. The security initiative must continue to be ongoing, assessing our databases and information systems for security risks. The purpose for this Six Sigma project is to increase the security threat/breach detection time by 25% in the next 6 months.

Problem Statement (continued)

Principle Stakeholders  Project leaders, project sponsors, project team members  Healthcare professionals (physicians, nurses, etc.)  Senior executives  IT department  Data security unit  Customers  Employees  Healthcare insurance claim professionals

Stakeholder Analysis Project Relationship  Impacted by project: all stakeholders  Influence project outcome: customers, project leader, project sponsor, project team members, senior executives, IT department, data security unit, and employees  Content/Process Expert: project leader, project members, IT department, and data security unit  Provide resources: project leader, project sponsor, senior executives, IT department, data security unit, and healthcare professionals  Has decision authority: project leader, senior executives, IT department, and data security unit

Stakeholder Analysis (continued) Communication Strategy  Regular meetings: project leader, sponsors, and members, senior executives, IT department, data security unit, employees, and healthcare professionals  Invite to meetings: IT department, senior executives, and data security unit  Copy of minutes: project leader, senior executive, and project members

SIPOC Diagram

Project Timeline

Thank you for listening!