Description
You are the chief information technology officer at a small outpatient health care facility in Riyadh. The medical facility employs five specialist physicians, ten certified nurses, five administrative assistants, and two technicians. There are 25 clinical rooms. Each room is equipped with a computer. In addition, five computers are used by the administrative assistants for patients’ appointments and records. All of these computers are connected using a local area network. Physicians are supplied with portable devices that they can use to write e-prescriptions. These devices are connected wirelessly to the rest of the network.
As the chief information technology officer, you are charged with the task of evaluating the security status of the facility network and developing a report to recommend the directions that should be followed in the near future.
Your report should include the following materials:
- Existing and potential vulnerabilities and threats
- Suggestions and discussions of methods or tools that can be used to overcome the existing and potential security threats
- Discussion of encryption techniques that can be used for the wireless network and the selection and justification of a proper technique for this facility
- Discussion of the prevention of cyber-attacks and the proper maintenance needed to achieve this goal.
Your well-written paper should meet the following requirements:
- Be six to eight pages in length
- Contain illustrative diagrams for the considered systems
- Formatted in APA style
Explanation & Answer
Attached.
Security Evaluation - Outline
Thesis statement: It is through this that there creation of environment that is focused on
maintenance of security and the elimination of the vulnerabilities that the management faces.
I.
Existing and Potential Vulnerabilities
A. Buffer overflow
B. Injection
C. Misconfiguration
II.
Methods of Overcoming Threats
A. Security officer.
B. Policies.
C. Training
D. System Monitoring
III.
Encryption Techniques
A. Wired Equivalent Privacy
B. Wi-Fi Protected Access
IV.
Cyber-Attack Prevention
A. Computer update.
B. Use of passwords.
C. Training
D. Hiring an expert.
Running head: SECURITY EVALUATION
1
Security Evaluation
Name
Institution
SECURITY EVALUATION
2
Security Evaluation
There are different risks that the networks in any facility are likely to face. It is important
that there is the evaluation of the risks as it is through this that there are management and the
introduction of measures that help in the mitigation of the risks. There is an increase in the
number of risks, and this is attributed to the changes in technology increasing the need to identify
the roles and the responsibilities that the management plays in the enhancing security of the data
and constant mitigation of the risks. The employees in the organization play a major role in the
reduction of the risks and this necessitates for the management to ensure that there is proper
training on the risks that the management faces. It is through this that there creation of
environment that is focused on maintenance of security and the elimination of the vulnerabilities
that the management faces.
Existing and Potential Vulnerabilities
Operation systems face different vulnerabilities, and this affects the operations of the
hospitals. Hacking is one of the potential vulnerabilities that systems at the hospital are likely to
experience and this involves stealing of data that belongs to company necessitating for the need
to enhance security. Having proper infrastructure in place means that there is the identification of
the issues that the firm is likely to face and the avoidance of risks in helping the management to
advance its operations. It is through this that there is the education of the employees in the role
that they place in enhancing security.
Potential Vulnerabilities
Buffer overflow
It is one of the vulnerabilities that the system faces, and this means that there is the need
to ensure proper security measures are in place to avoid the overwriting of the data by the
SECURITY EVALUATION
3
hackers. There is the protection of the data through the identification of the various methods that
should be used for the detection of the codes that might be malicious. It is through thi...
Review
Review
