DISCUSSION MINIUM 175 WORDS: Identify potential security risks to a health care network. Provide specific examples of security risks and how they can affect the entire health care organization.

REPLIES MINIUM 100 WORDS:

Starla Mcfarland-Hi Class! Healthcare networks can experience potential risks, such as ransomware, and large organizations are often targeted—insider threats where employees may misuse patient information. When employees misuse patient information, it is also a violation of HIPAA. Organizations are impacted by HIPAA violations, such as at risk of losing their license, depending on whether the violation was intentional or not. Ransomware attacks can also disrupt patient care services, such as diagnosis and treatment. When services are disrupted, this can cause the cancellation of an appointment and medical information exposure. Because of the large amounts of data that most hospital organizations hold, a data breach can cause significant patient data loss, and financial information can be vulnerable. Organizations can also be affected by security risks that cause them to sustain operations. Phishing attacks are also a risk for example when employee receive an email that appears to a reputable source when the employee open the email it contains malware once downloaded. A weak password can be a risk. Attackers can quickly gain access to the organization's network. Unpatched software can increase vulnerabilities to the entire organization's network.

Marquita Taylor- Hello All,I believe that healthcare organizations should always protect their patient's information and data. but i believe that with any organization there is always a risk. Security risk is a big on in my opinion. Some of those risk include Ransomware which a type of malware that is designed to encrypt the data on a network and demand release which can cause patients information to be blocked and not accessible, which can affect patient care as well. There. is also phishing, which is email usually sent by cybercriminals to trick people into revealing sensitive information. which can be harmful to the organization and patient data. there is also other risk such as Malware, and data breaches which i believe a lot of companies experience this. I believe that not all threats can be stopped, but i do believe that proper measures should always be put into place such as proper training for such possible threats and how to handle such. As well an employee having their usage monitored because they can unknowingly open an attack. I Also think regular security upgrades would be beneficial for the organization as well.

ASSIGNMENT: Assignment Content

Top of Form

Network security policies are an essential component of health care organizations and are part of the fundamentals for all health care organizations. These policies define the design of policy enforcement and establish rules for access to the network. Security policies are vital in ensuring networks are protected.

Imagine you are hired by a health care organization as a network technician. During your initial network audit, you noticed vulnerabilities in the system that could grant unauthorized persons access to the network. Establishing a security policy will be integral to a reliable telecommunications system, as well as ensuring a consistent and ongoing auditing policy is in place.

Develop a 2,100- to 2,450- word network security policy that prescribes techniques and methods to ensure secure access to the organization’s network. You may utilize the SANS Security Policy templates as guidance as you develop the network security policy.

In your policy, include the following:

o Privacy policy

o Acceptable use policy

o Authentication policy

o Internet use policy

o Access policy

o Auditing policy

o Data protection