There are a lot of potential threats that can cause harm to a business or organization but what
in the medical field the threat is mainly about stealing information from patients such as
financial information, name, address, etc. those demographics can allow a person to steal
your identity. So if this is the case you must wonder if they have some sort of system or
process to prevent this from happening. Which is when it becomes important to have a
planned security method in place to protect patients. The doctors office or hospital will take
certain measures to ensure such safety when it comes to their patients information such as
purchasing security software to protect their devices from cyber attacks and viruses. Which
is very helpful because it prevents hackers from being able to access the patient information
that is located in their electronic health record (EHR). It is also good to hire someone to
monitor the activity of the patient information as well so that they can detect an attack that
the system doesn’t and stop it. Risk Management at a financial institution such as USAA is
very critical. USAA is a federal bank and has access to plenty of people’s personal and
financial information. Because of their access to such personal information there are several
risks and vulnerabilities that clients and people have to be prepared for and protected from.
Some of the risks are cross site scripting, remote code execution, and more. The best way to
go about protecting users from cross-site scripting is likely to involve a combination of
filtering input on arrival, encoding data on output, and using appropriate response headers..
To do this you would filter as soon as the user input is received and filter as strictly as
possible depending on what is expected or valid input. To prevent users from remote code
execution timely installation of software update is ranked as the top cybersecurity measure
in preventing remote code execution attacks. If your organization is using computers or
servers that are using software that’s vulnerable to remote code execution, the last vendor
patch to diminish this particular cyberattack should be timely applied. Risk management for
Virginia Medicaid is extremely important. The assets that they have to look at is Account
information as in social security numbers and account numbers for banks. The best way to
ensure that the risk factors go down is to make sure that employees do the clean desk policy
which removes all important documents at the end of the day or when they are away from
their desk. Also they have a risk with employees taking home laptops someone might
connect to a non secure network and a hacker can gain information that way. Also make sure
that people have the correct ID badges and that non employees who no longer is employed
cannot enter the building as well. They need to have a higher security with what people do
on work computers such as online shopping and more. After reviewing System76, I can say
that the over all risk assessment is relatively low, and the best I can tell their risk control is
pretty good. I do not know that I could advise the company on an contingency plan. Their
biggest risk is possible theft of customers payment methods, however, for what I can tell
they already use a third party company for transactions, so that transfers their risk and
liability. Risk control is mitigated by having hosted site, once again transferring the
responsibility to a third party. If they were to change things up, in the future, having
employees access sensitive information, via VPN. Having a strong, and closely monitored
firewall protecting customer sensitive information, also employing remote encrypted storage,
backing up order history and also unfulfilled orders. The firewall and the remote encrypted
storage, along with the VPN access should cover all three topics we needed to discuss. Risk
Management can play a very important role when it comes to working with any computer
company. It will give the individual different steps that they have to go by which would be
the process of rsk management. The Basics of Risk Management stays the same. We know
that we must take a risk assessment and follow all guidelines. We could identify potential
risks and try to figure out whats wrong or how we can support it. There are several steps
involved in the security planning process including contingency planning, risk assessment
and risk control. Contingency planning is about creating a response plan if an adverse event
should threaten our normal operations. An important part of Contingency planning is
incident detection and this involves identifying the different types of events that could cause
harm to our business. This type of event is called an adverse event. When an adverse event
happens it’s important to roll out our incident response plan which is going to detail how our
business is going to respond to the adverse event to continue operations.
a a Another step in security planning is risk management. Risk management is about
identifying the risk to our business and how we can actively protect ourselves from that risk
being able to damage our operations. This is important because it helps us reinforce our risk
weaknesses.
a a a a a a a a a In our current business we face a number of risks and we have some vulnerabilities
that need to address. But first we have to start by identifying our assets that need to be
protected. The first asset we should evaluate is our servers. Currently our server room is
unsecured. We do not control the physical access of people into our server room which can
be a serious problem. It would be very similar to disabling our network firewall. We also
should identify other risk or adverse events that could impact our server room. After we
have done this we should start a contingency plan to establish what actions should be taken
in the event of an adverse event. Additionally what steps can we take now to mitigate the
risk of such adverse event. I originally choose Apple to write about and the risk level versus
the value of data they hold that threat are after to exploit. Apple has systems in place to
assess risk levels daily if not using advance systems to assess risk level and the assets they
want to protect and the treat to those assets. Apples risk assessments in place continuously
looks for threats they face and the projected damage done if a threat is successful that then
goes into contingency planning based off the risk appetite. Contingency planning is always
planning for the likely and most likely outcome for incident recovery. Some incidents are so
disastrous that the primary site isn’t immediately recoverable, and Apple would have to use
on of their offsite or alternate location while the primary site and servers are recovered. I
think Apple has advance systems in place that are continually evolving to assess risk
assessments and develop risk controls that eliminate or minimize the threats to assets that are
worth defending as a big Apple product and account user it’s comforting that they value my
information as a asset worth defending from threats. The surge in remote working has made
managing data on employee devices increasingly important and I wanted to see if anyone in
the class is using or have used mobile devices to conduct work for your organization.
American eagle would need to assess their risks first. I believe they have a lot of information
to protect. They store many customers personal information, including emails, birthdays,
home addresses, etc. With that their website/app stores credit card information for ease of
ordering for their customers. Once we have identified the assets to protect, we would place
value upon them. Next, we would need to assess the threats they are facing. I would imagine
with any corporation they likely face a lot. Hackers, knowing they store pertinent
information on their servers would make anyone a target. Risk management is extremely
important so everyone can be aware of what is at stake if there was an adverse event.
Knowing the amount of loss is also important if a breach was successful. Having a recovery
plan in place would be helpful. Having a planned response ready if an incident occurs will
reduce the losses we may face. Aside from American Eagle’s online database they need to
protect, they also need to be able to run point of sale registers around the world. When we
had an issue before and could not ring people up they either had to come back (and they
likely wouldn’t so we lost sales) or we would have to handwrite receipts and imprint credit
cards which a lot of people are not comfortable with these days. The steps involved in
security planning for Verizon would start with doing a risk assessment. First, we would need
to understand what we want to protect, and then understand the threats that face the things
we want to protect, or assets. We would create a TVA (Threats, Vulnerabilities, and Assets)
worksheet, by listing the assets by order of importance down the first column and the threats
by order of danger across the top row. Where each of these intersect, we would list the
weaknesses found. Once the TVA worksheet is complete the risk appetite will be
determined, or whether we are able to live with a current risk. The risk control options
include accepting the risk; transferring the risk to another organization or company;
mitigating the risk; terminating the program, software, etc., that creates the risk; or
defending the risk. Basically, we will decide for each intersection if we can address it in-
house or if we need help from a specialized company. Risk management is very important if
an organization wants to have a working security planning process. If something is missed
while doing a risk assessment it will likely cause the company losses in revenue, data, time,
and even reputation. The key steps that are involved in security planning for an organization
include identifying the vulnerabilities and weaknesses in the system, risk management
including prioritizing them and deploying stringent control measures. Furthermore, it is very
important to create a robust security culture so that both employer and employ can
contribute towards the security aspect. The thorough and timely review of IT policies and
protocols are very important as they provide direction to the personnel to minimize risks that
could arise and compromise the security .The employees must be given training so that they
can play a proactive role to strengthen the effectiveness of the security plan. Risk
management is very important in the security planning process as it helps to identify the
threats that could arise and compromise the security (Renfroe & Smith, 2010). Thus it
influences the security plan so that the identified risks can be reduced or eliminated. The
existing threats and vulnerabilities impact the importance of risk management. Since the risk
management process is in place to deal with these elements, it acts as a barrier that
safeguards the business organization and improves its security. Thus risk management is a
cardinal component of a security plan that helps to strengthen the security posture of the
organization. One example of contingency planning that we have here at Kaiser Permanente
is when we have "down Time". Down time is when our systems are down, we have no
internet connection, our computer systems stop communicating to each other and we have to
process prescriptions manually. Filling a prescription during down time can be very
dangerous, and very overwhelming. We have to manually type every bit of information thats
on the prescription, from patient information, doctors information, the instructions,
description of the medication, and manufacture. Normally our computer system does all that
for us, our system also automatically lets us know of any drug interactions with other
medications the patient is on, now times that by how ever many prescriptions we have to
process during down time. Thats only getting the prescription ready, now we have to sell it,
we have to verify everything manually, verify the patient, medication, directions, how many
medications the patient is picking up. We have to fill out a manual receipt and have the
patient print and sign. When the system is back online we later have to get all the manual
receipts and process them in our system so its saved into each of the patient profile and sell
them again in the register. This is a big security and safety issue, this increases our chances
of selling the wrong medication, giving protected health information to the wrong patient,
processing the wrong prescriptions into the wrong patients profile. The main issue during
down time is not being able to close the pharmacy, patients are coming down from the ER
needing their medication, and wanting to go home. We need to be there for the patients, and
our members at Kaiser, so we have a system to process prescriptions during these tough
times. Apple always has Contingency Planning going on due to a lot of users calling in
about their accounts with issues. When a customer calls in you always have to verify who
you are speaking with and make sure the case customer match's the name given. Then you
are able to proceed to help the User if not then you are unable to help them unless customer
has a case profile. Apple always keeps the correct policy's up to date so that whatever risks
there are we know how to see a threat coming. Its very important to make sure your talking
to the correct person attached to the case so that your not giving out wrong information.
Before being able to give specifications to a apple product you have to get the serial or IMEI
number first. Making sure you have the correct device and giving out the correct
information. Threats are a big impact because a lot of people use apple products and their
services backing up to icloud their information also so they wont lose it if their device stops
working. The user can always download their information off the cloud on their new device.
Adversary's always want to get users information by pretending to be a apple representative.
Currently companies are falling victim to ransomware attacks every 14 seconds. “These
sophisticated attacks start by infecting secure database systems, encrypting data, and
threatening deletion or corruption of files unless a hefty ransom is paid.”. To evade these
types of threats, CACI would need to focus on keeping data backup stored off the network
and maybe store that data on a cloud service of your choice. Performing actions like this as
a part of a ransomware recovery strategy will help to mitigate any loss of data, business
interruption, and added losses associated with having to pay a ransom for your data. Another
attack that CACI may encounter and is considered to be a very big threat on the internet
today is botnets. Botnet uses a group of computers in a ‘zombie state’ to carry out
Distributed Denial of Service (DDoS) attacks which overwhelm a company’s information
system until the attackers get what they want from the company. This could be a ransom or
a competitor that wants to crash your network while competing for the same government
contract to provide a new military technology. Your network security plan should guide
CACI employees in the use of email, electronic devices, Internet usage, and other guidelines
in respect to your company’s network. You have to ensure that this security plan is easy to
follow and seamless to implement. In order to accomplish this, you have to ensure that the
plan is manageable, understandable, and enforceable. Risk management is a key part of the
process as well because you have to consider the risk or events before they happen which
can save money and protect the future of CACI. If something were to go wrong, you already
have a plan of action to eliminate or significantly reduce that event or threat. Existing
vulnerabilities and threats impact the importance of risk management because not only do
you have to evaluate all possible risks but it is a fluent process because threats are always
evolving. You will have to continue to monitor the existing and new threats to make sure
that your risk management is fluently current with future threats just as much as current
threats.
