Healthcare Information Security Risk Analysis
University of Phoenix
CMGT/559: Managing Risk And Security Vs Opportunity
March 28, 2022
Healthcare Information Security Risk Analysis
Risk 1:
Ransomware
Risk 2:
Distributed
Denial of Service
Risk 3:
Data Breaches.
Risk 4:
Insider threats
Risk 5:
Cloud threats
Risk Rank Extremely
disastrous
Critical Moderately
Catastrophic
Marginal Marginal
Risk Description Ransomware
targets a
company's
critical.files and
systems until a
fee is paid.
It is an attempt to
overwhelm the
hospital network
to the extent that
it can no longer
function
normally.
It relates to
unauthorized
access to patient
information
like.prescriptions,
Social Security
numbers, and test
results.
Employees sell
sensitive,
protected patient
information on
the illicit market.
The majority of
cloud-based
solutions are non-
compliant with
HIPPA
regulations,
making them a
prime target for
hackers.
Source, Threat
or Risk driver
Organized Crime
groups
Bot Network
Operators/
Spammers
Hackers Employees of
hospitals and
vendors of
outsourced
services
Malicious
Insiders
Likelihood Very likely Possible Certain Possible Unlikely
Organization
Impact
It hinders
the.healthcare
