Question

Think about your doctor's office and all of the data that you divulge, in confidence, to the personnel who provide you services.

• Do you confirm your personal data with a receptionist each time you go to an appointment?
• Have you ever been contacted by the office staff about lab work done at a hospital?
• Does your doctor use an EMR (electronic medical records) system?

Submit a risk assessment for your doctor's office. Be sure to identify the cybersecurity risks that might be present, discuss the assets' value and assess probability and impact. While you may capture the assessment in a table, your submission's introduction, discussion of the findings, including whether you used qualitative, quantitative or both methods of assessment, and conclusion must be written.

Answer 1

Because of increasing use of technology, nowadays everywhere computers are used for variety of tasks.

Hospital Management system is one of the best application where computers play a very important role.

Hospitals can be a small one or a very large one having many departments included.

If a hospital is big one then it can contains many things like

1) Patients

2) Employees of Hospital (Doctors, Nurses,Consultants,Lab Assistants etc)

3) Financial Data of Hospital ( Expenditure, Salaries of employee,Billings of patients, etc)

4) Structure of Hospital ( Departments, Labs, Operation theatres etc)

In order to manage this huge data definitely computer systems with well efficient databases are required.

But if computer systems in hospitals are not well maintained then serious issues can be arised.

Cybersecurity risks that can present in hospital network:

1: If network administration is poor. ( There is no watch on network traffic)

2: Less security ( No usage of firewall)

3: Centralized server ( All data is kept at one place only)

In this case if any cyber attack takes place then it can damage the server and thereby whole system will collapse.

4: Traditional handwritten reports keeping technique. Lack of EMR system.

5: No periodic backup.

6: Databases used in system are not secured and there is no user previlidges.

These above can be in general threats that can present in many hospital systems.