Explain how Dr. David Nelson is the managing partner in a small clinic practice located in southern California. He and his eight partners have been exploring the benefits of participating in the federal meaningful use incentives that would mean collecting tens of thousands of dollars in exchange for implementing an electronic health record to replace their existing paper files. Dr. Nelson is concerned at the cost of adding sophisticated technology into the overall management responsibilities, as well as the ability to find and retain expensive IT support staff sufficiently knowledgeable and available to meet their needs. Dr. Nelson attends the annual HIMSS conference where he has the opportunity to speak to a large number of vendors and peers about options available to him, and has returned from the conference convinced that the optimal approach for him and his partners is to purchase a cloud computing “Software as a Service” solution. One of this partners is not as convinced and has asked you to attend their next partners meeting to discussion security and privacy implications and to recommend solutions they might consider to manage having their regulated patient data stored offsite with a cloud provider. Use the study materials and engage in any additional research needed to fill in knowledge gaps. Discuss the following: Describe the potential security and privacy implications of storing patient data in a 3rd party controlled cloud environment. Explain the role of the hypervisor and the security vulnerabilities specific to this technology. Identify tools that are available to mitigate vulnerabilities specific to virtual and cloud computing implementations. Recommend how a small medical clinic can leverage cloud computing strategies without putting their patient data at risk. Describe the implications of public versus private clouds in operating system security.