City Medical Partners Case Study

Running Head: CITY MEDICAL PARTNERS CASE STUDY
CITY MEDICAL PARTNERS CASE STUDY
Name of the Student:
Name of the University:
Author Note:

1CITY MEDICAL PARTNERS CASE STUDY
Executive Summary
Risk management is a major issue for organizations now a day. For different sectors, risk can
be of different types. Implementing a system, which can not only analyze the ins and outs of
the organization but also can predict different risk factors and prevent them, is the solution to
be implemented as risk management process. The recent trend of risk management is IT
based systems. Such systems offer highest accuracy, automation and proper process flow in
any organization. However, how IT based system can be the answer for risk management can
be answered by a thorough analysis of the requirements and planning of the existing system.
This is why COBIT framework is used. COBIT framework reviews the existing policies,
process flow structure and other parameters of the company to analyze the exact requirements
and proposes the exact planning helpful for the organization. Here the chosen organization is
City Medical Partners Organization of New Zealand.

2CITY MEDICAL PARTNERS CASE STUDY
Table of Contents
1. Introduction..............................................................................................................................3
2. Why is COBIT implemented?..................................................................................................3
3. Objective of COBIT analysis...................................................................................................4
4. COBIT 4.1 framework based analysis of the requirements and implementations in City
Medical Partners..............................................................................................................................5
5. COBIT 4.1 framework based planning required for City Medical Partners Organization......7
6. Conclusion and Recommendation............................................................................................9
Reference.......................................................................................................................................11

3CITY MEDICAL PARTNERS CASE STUDY
1. Introduction
For a medical institution, IT can have advantages besides risk factor. If implemented
properly, IT can reduce the risk factors in considerable level, yet it can be a high-risk
parameter in opposite condition. COBIT is a highly beneficial framework for any medical
establishment to properly implement the IT or Hospital Information System (HIS) and avail
risk management (Zhang & Le, 2013). This is because employees of any medical
organization do not have adequate knowledge regarding how to handle IT related risk.
COBIT framework is the best solution to cop up in such situation and identify the necessary
steps, which need to be implement properly for risk management in hospitals. The report will
explain the implementation of COBIT to analyze the IT-related risk assessment at City
Medical Partners, which is situated in New Zealand.
Identifying the risk factors and COBIT control parameters for medical organizations
are quite a task for many specialists however, in case of City Medical Partners Organization,
it is apparently an Easy one as the new Chief Information Officer (CIO) of the organization,
Jim Foley, has previous experience of utilizing COBIT framework. He understands the
importance of data protection and IT risk parameters. In addition, he has sound knowledge
regarding the regulatory rules and regulations of Data protection and health organizations in
New Zealand. The aim of this report is to identify the IT risk factors of the hospital and
suggest regulatory actions, which will be beneficial for the organizations.
2. Why is COBIT implemented?
For hospitals and medical organizations, risk management typically refers to
conditions like immediate response situation. The staff and employees of medical
organizations have very less knowledge and experience about IT and high-risk management
related to it (Putri, Lestari & Aknuranda, 2017). Their management style is not well planned