AD Health Network has three main products: HNetExchange , HNetPay, and

You are an information technology (IT) intern working for AD Health Network, Inc. (AD Health Network), a fictitious health services organization headquartered in Abu Dhabi. AD Health Network has over 600 employees throughout the organization and generates two billion dirhams in annual revenue. The company has two additional locations in Al Ain and Dubai which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors.

Company Products

AD Health Network has three main products: HNetExchange , HNetPay, and HNetConnect.

e-mail Exchange Server

HNetExchange (Critical??) is the primary source of revenue for the company. The service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics.

 

 

HNetPay (Major??) is a Web portal used by many of the company’s HNetExchange customers to support the management of secure payments and billing. The HNetPay Web portal, hosted at AD Health Network production sites, accepts various forms of payments and interacts with credit-card processing organizations much like a Web commerce shopping cart.

Internet

 

 

 

Web Server

Transactional Database Server

 Server



 

 

 

Accounts

 

 

Internet


HNetConnect (Critical) is an online directory that lists doctors, clinics, and other medical facilities to allow AD Health Network customers to find the right type of care at the right locations. It contains doctors’ personal information, work addresses, medical certifications, and types of services that the doctors and clinics offer. Doctors are given credentials and are able to update the information in their profile. AD Health Network customers, which are the hospitals and clinics, connect to all three of the company’s products using HTTPS connections. Doctors and potential patients are able to make payments and update their profiles using Internet-accessible HTTPS Web sites.

 

Database Server

 Server

Web Server



 

 

 

 

Doctors Update

Doctor Clinic Data



 

 

 

Information Technology Infrastructure Overview

AD Health Network operates in three production data centers that provide high availability across the company’s products. The data centers host about 1,000 production servers, and AD Health Network maintains 650 corporate laptops and company-issued mobile devices for its employees.

Threats Identified

Upon review of the current IS security risk management plan, the following threats were identified:

·        
Loss of company data due to hardware being removed from production systems for storage or maintenance

·        
Loss of company information on lost or stolen company-owned assets, such as mobile devices and laptops (theft)

·        
Loss of customers due to production outages caused by various events, such as natural disasters, change management, unstable software, etc.

·        
Internet threats due to company products being accessible on the Internet e.g. DOS, phishing, hacking

·        
Insider threats (2-3 threats), e.g. downloading/installing software, data leakage, fraud.

 

The key roles and responsibilities of individuals and departments within the organization as they pertain to security management are indicative only. You are free to add relevant roles while drafting the report.

 

 

Individuals

Departments

HNetExchange

Network Admin, CISO

IT

HNetPay

CFO, Network Admin, Programmers, Users

Account, IT

HNetConnect

Admin Manager, Network Admin, Programmers, Doctors

Admin, IT, Medical

Data Centers

3rd Party Vendors, CISO, Networking Team

IT

 

Management Request

Senior management at AD Health Network has determined that the existing IS security risk management plan for the organization is out of date and a new plan must be developed. Because of the importance of security risk management to the organization, senior management is committed to and supportive of the project to develop a new plan. You have been assigned to develop this new plan.

Additional threats other than those described previously may be discovered when re-evaluating the current threat landscape during the cyber risk assessment phase.

The budget for this project has not been defined due to senior management’s desire to react to any and all material risks that are identified within the new plan. Given the company’s annual revenue, reasonable expectations can be determined

For the assigned project, you must create an initial draft of the security risk management plan. To do so, you must:

  1. Develop and provide an introduction to the plan by explaining its purpose and importance.

(Including identifying the stakeholders of the project; and defining the scope and boundaries of the plan).

 

  1. Identify the threats, threat agents, assets, vulnerabilities, impact, mitigation (technical/non-technical), relevant controls, resources/tools required, and cost of mitigation.
  2. Identify the key roles and responsibilities of individuals and departments within the organization as they pertain to risk management.
  3. Implement a security education, training, and awareness program for a selected threat or set of threats.
  4. Develop a proposed schedule for the risk management planning process.
  5. Create an issue specific policy for an identified threat.

Click here to request for this assignment help

#Health #Network #main #products #HNetExchange #HNetPay

Share This Post

Email
WhatsApp
Facebook
Twitter
LinkedIn
Pinterest
Reddit

Order a Similar Paper and get 15% Discount on your First Order

Related Questions

Millennial’s and Depression

 Cited: Create the works cited page at the end of your paper on a new page. Label this page Works Cited at the top middle of the page. Do not underline, bold, enlarge or use quotes for the words Works Cited. Capitalization: In titles of works, all words are capitalized

How is Technology Helping You Achieve Your Goals? How is

   How is Technology Helping You Achieve Your Goals? How is it Distracting You from Your Goals? – Discussion Forum  Take  some time to think about your goals for this week, the remainder of the  semester, and the rest of your time in school. Is technology is helping  you achieve

Grand Canyon University Problem Solving Nursing Assignment Help

Assessment Traits Requires Lopeswrite Assessment Description You want to propose a new way to solve a problem at your workplace. To describe your implementation for this change, use the following information to submit a business plan detailing the need for this change to the head of your department.For this assignment,

Historicism, Postcolonialism, or Marxism Essay

This assignment will use theories learned in Week 4 to analyze a literary work. Write a 700- to 1,050-word essay analyzing a selected work, which you have found, of literature (poem, short story, or drama). Interpret the theme(s) of the work from a historical, postcolonial, or Marxist point of view.

Overview The purpose of this discussion is to evaluate the

  Overview The purpose of this discussion is to evaluate the arguments in favor of and opposing the passage of the Equal Rights Amendment (ERA). Instructions:  For this discussion, review your readings for Unit 15 and read the following scenario carefully. Feel free to do research outside the course if

Week 3 ProjectAssignment Due November 14 at 11:59 PMPreparedness and

  Week 3 ProjectAssignment Due November 14 at 11:59 PMPreparedness and Response to Bioterrorism There are different categories of weapons of mass effect—chemicals, biological pathogens and toxins, radioactive materials, nuclear devices, and nonconventional high-yield explosives. Out of these, biological weapons are used in a terrorism type called bioterrorism. According to

1.Explain the term “population at risk” and provide at least two relevant examples as seen in the practice of modern epidemiology. Your response must be at least 200-400 words in length 2. Explain the Nursing Assignment Help

1.Explain the term “population at risk” and provide at least two relevant examples as seen in the practice of modern epidemiology. Your response must be at least 200-400 words in length 2. Explain the meanings and uses of incidence, prevalence, morbidity, and mortality in modern epidemiology. Your response must be

Let’s exercise our scientific literacy and reasoning skills to determine

   Let’s exercise our scientific literacy and reasoning skills to determine if you would buy a product that is marketed to you using science claims. Instructions: Work on this assignment independently. Please answer each question with complete sentences and proper grammar. Please handwrite and make sure your writing must be

Instructions: First, review the plot diagram from Unit 1. Then,

Instructions: First, review the plot diagram from Unit 1. Then, write a very simple story using the seven-sentence story format:1. Once up on a time… 2. And everyday… 3. But one day… 4. Because of that…5. However…6. Until finally… 7. And ever since then…Please note that this is not a

3 pages In a document saved in Word or PDF,

3 pages  In a document saved in Word or PDF, answer or elaborate on the following (you may use one paragraph for each numbered set of questions: for example, one paragraph for number one, etc.): 1. Overview: In your own words, explain what you learned this week from the textbook

Genetics, Technology & Society – Mutants

What type of mutant organism would you make if you had the technology? Would you create a new type of worm with longevity? A mutant rice with increased nutritional value? A dog that glows in the dark? All of these currently exist. Think about it. What would you create? 1.

Chapter 10 Part 2 of 2 Probation is a sentence

Chapter 10 Part 2 of 2 Probation is a sentence of imprisonment that is suspended & served while under supervision of the community.  Parole is the supervised early released of inmates from correctional facility (Schmalleger, 2018).  Currently there has been a renewed interest in releasing prisoners of prison and placing

Film Production: To which filmmaker do you look for inspiration and

1: Outline a 6-8 min. no-budget film that you could make this summer. Describe the form and content. It can be a fiction, documentary or experimental film, and should be a specific story that you are passionate about. (250 words max). 2: To which filmmaker do you look for inspiration