HealthcareX has undergone substantial growth in terms of patient volume. The organization has shifted from a paper-based organization to a digital organization as mandated by the US EMR/HIPAA directive. However, its data management practices, procedures, and systems have not kept up with the growth, resulting in inadequate content management that fails to guarantee the accurateness and accessibility of data, thereby compromising the protection of sensitive information. HealthcareX must ensure data security to safeguard sensitive information against unauthorized access, loss, destruction, and other potential risks.

Inadequate data security is detrimental to HealthcareX. It can expose the organization to a range of risks, including hefty penalties, harm to reputation, and financial loss (Haug, 2012). It is important to note that healthcare data, because of its sensitivity and high value, is frequently targeted by cyberattacks. As a result, the healthcare sector is subject to strict regulation, including specialized legislation like the Health Insurance Portability and Accountability Act (HIPAA). The HIPAA security law establishes national regulations to protect electronic health data that is created, received, used, or kept by healthcare organizations. The law requires healthcare organizations to implement proper administrative, physical, and technical strategies to ensure the privacy, integrity, and safety of digitally stored health information. In order to keep up with the rapid growth and ensure operational efficiency, HealthcareX needs to adopt enterprise document management (EDM).

EDM is the systematic procedure of organizing, regulating, and protecting an organization's data resources. EDM encompasses a collection of approaches, guidelines, and tools that assist organizations in effectively handling their data as a valuable resource, and guaranteeing its accuracy, comprehensiveness, and reliability (Kunstová, 2010). By prioritizing data management, HealthcareX guarantees the security and accessibility of its data for staff. According to Vom Brocke et al. (2011), this enhances the capabilities of the organization by ensuring the acquisition of reliable data for precise analysis, the security and compliance of data in accordance with regulations, the aggregation of data from several sources to enhance efficiency, and the reliability and adaptability of data architecture to accommodate the growth of the organization.

One of the EDM frameworks that HealthcareX can adopt is the Cloud Data Management Capabilities (CDMC) framework. CDMC framework provides guidelines and abilities to assist enterprises in achieving smooth cloud migration, efficient data protection, and strong data management in the cloud (Ismael & Okumus, 2017). The framework was developed with input from leading global internet services and top-tier providers of data governance, intelligence, and data privacy services. The collaborative initiative was led by the EDM Council, an international body that promotes the advancement and adoption of data standards and optimal practices. Another framework that HealthcareX may consider is COBIT (Control Objectives for Information and Related Technologies). The framework is oriented towards business and outlines a collection of universal procedures for managing Information Technology. Each procedure is accompanied by its inputs and outputs, essential tasks, objectives, performance measurements, and a basic maturity model (Ismael & Okumus, 2017). Moreover, the framework provides universally recognized concepts, models, and analytical tools to enhance the reliability of information systems.

The framework that best suits HealthcareX is the CMDC model. This framework creates a complete set of guidelines for enterprises to effectively manage and safeguard their cloud data, securely migrate to the cloud, and integrate automation and technology to enhance data management. CMDC Focuses on assessing and improving data management capabilities (Ismael & Okumus, 2017). Implementation outcomes include increased data reliability, improved data governance, and enhanced data security.

Implementation of the project requires careful and proper planning. The following is an outline of the implementation phases:

· Initiation: Identifying the need, setting objectives, and getting stakeholder buy-in.

· Planning: Defining the scope, timeline, and resources required.

· Design: Creating detailed design specifications for the solution.

· Development: Building and configuring the solution.

· Testing: Ensuring the solution works as intended through various tests.

· Deployment: Rolling out the solution to users.

· Maintenance: Ongoing support and improvements post-deployment