HIT 2200 MOD 3 DB

 

The first Administrative Safeguard in the Security Rule Standards is the Security Management Process standard.  The Security Management Process standard has four required implementation specifications.  Two of these are Risk Analysis and Risk Management.   Risk Analysis and Risk Management are the foundation upon which an entity's necessary security activities are built.  Security Risk Analysis and Management  Download Security Risk Analysis and Management Open this document with ReadSpeaker docReader

by Tom Walsh describes how to conduct the analysis and management.   Walsh advises that identifying vulnerabilities and controls should go hand in hand.  He describes five categories of controls in the control analysis/assessment of current security measures in the 4th of 8 steps of risk analysis.

1. What are the five categories of control?
2. Describe a threat and explain how one type of control, of your choosing, can be used against that threat.