The world’s Largest Sharp Brain Virtual Experts Marketplace Just a click Away
Levels Tought:
Elementary,Middle School,High School,College,University,PHD
| Teaching Since: | Apr 2017 |
| Last Sign in: | 103 Weeks Ago, 3 Days Ago |
| Questions Answered: | 4870 |
| Tutorials Posted: | 4863 |
MBA IT, Mater in Science and Technology
Devry
Jul-1996 - Jul-2000
Professor
Devry University
Mar-2010 - Oct-2016
Based on the below description provide a recommendation of how you would address each of the following ABC Healthcare’s computer network security requirements.
Discuss how the system will address User Account Management and related security improvements?
NO Plagiarism
ABC HEALTHCARE CASE BACKGROUND
Â
Healthcare companies, like ABC Healthcare, that operate as for-profit entities, are facing a multitude of challenges. The regulatory environment is becoming more restrictive, viruses and worms are growing more pervasive and damaging, and ABC Healthcare’s stakeholders are demanding more flexible access to their systems.
Â
The healthcare industry is experiencing significant regulatory pressures that
mandate prudent information security and systems management practices.
Furthermore, the continued pressure to reduce cost requires that management
focus on streamlining operations, reducing management overhead and
minimizing human intervention. The regulatory focus at ABC Healthcare is on the Health Insurance Portability and Accountability Act (HIPAA) and Sarbanes-Oxley (SOX). Both pieces of legislation highlight the need for good systems administration and controls, but focus on different aspects of the business. The main focus of HIPAA is to protect personally identifiable health information while SOX is concerned with data that impacts financial reporting. Violations may be met with both civil and criminal penalties. Therefore, the company must be ever watchful of new threats to their systems, data, and business operations.
Â
The most prevalent security related threat to on-going business operations is the
continued development and propagation of viruses and worms. Virus and worm
prevention or containment is a vital component to the overall risk mitigation
strategy. Virus and worm outbreaks have multiple cost aspects for the company
including lost patient charges due to system unavailability, lost productivity
because of recovery efforts due to infection, and potential regulatory impacts
depending on the virus or worm payload. However, the company must balance
risk with opportunities in order to serve the stakeholders and grow the business.
Â
ABC Healthcare’s stakeholders include multiple groups that depend on or need access to clinical and/or financial systems in order to help support and grow the company. The access requirements and associated risk model varies by user group. The main access groups are internal only users (i.e. nurses, hourly employee, etc.),
internal/remote users (i.e. salaried employees, doctors, etc.), and business
partners (i.e. collection agencies, banks, etc.). Risk mitigation solutions must be
developed for each user group to help ensure that the company recognizes the
benefit that each group brings and to minimize the risk to business operations.
The high-level management goals of the network design implementation are as
follows:
Â
· Support the business and balance security requirements without introducing significant overhead and complexity;
· Maintain and enhance security without significantly increasing management overhead or complexity;
· Implement systems that are industry supported (standards where appropriate), scalable, and fault-tolerant;
· Ensure that the design is implemented to help ensure compliance with any and all applicable regulations;
· Proper management of access control for legitimate users and malicious users is of the utmost importance for the security of the ABC Healthcare management system. The threat is not limited to outside malicious users but also legitimate users engaged in illegitimate activity.
-----------