IT Risk Management Institutional affiliation: Name: Date: Categorization of Data and Information Systems • Systems • Electronic Medical Record • Master Patient Ind0ex • Clinical Decision Support • Data • Health surveys • Claims data • Administrative data Deterministic versus Probabilistic Risk • Deterministic -Analyses the risk using the impact of a single risk scenario • Probabilistic Risk -Uses all possible scenarios; • Likelihood • And impacts Deterministic Risk Analysis • Medical Risks • • • • System Failure Natural Disaster Malicious attacks Accidental Human interference … Deterministic method Probabilistic Risk Analysis Monte Carlo Simulation Building Monte Carlo Models • System Failure due to malicious attacks • 20% chance of malicious attack • 30% change of no malicious attack • 40% chance of early recognition • 10% chance of becoming a severe case Why Monte Carlo Simulation? • Early likelihood of meeting project milestones and deadlines • Predicts schedule and cost overruns • Quantifies risks to assess risks better • Better decision making. How NIST 3-tiers ensure information security • Leverage threat intelligence • modularizing the layers used for data storage, business logic and user interface. • Allows for independent update of information References • Antonello, M., Barberio, E., Baroncelli, T., Benziger, J., Bignell, L. J., Bolognino, I., ... & Dafinei, I. (2019). Monte Carlo ...
Purchase document to see full attachment