Cyber-attack occurred in a healthcare organization
Consider this scenario: A cyber-attack occurred in a healthcare organization, resulting in significant data loss. You have been called as an information security management consultant to recommend an incident response plan for this incident and will need to present it to the executive board of the healthcare organization.
Develop a 10- to 12-slide multimedia-rich presentation of your recommended incident response plan to mitigate or reduce the impact on the organization, and do the following:
Define the incident response plan goal and scope for this cyber-attack.
Analyze the impact and severity of the cyber-attack by applying a business impact analysis (BIA) to the organization, including mission performance, regulatory requirements, and compliance.
Identify the communication requirements, including criteria for escalation and organization reporting and regulatory requirements.
Explain the process for responding to this incident.
Describe the relationship with other organizational processes and methods, such as BCP/DR.
Recommend prioritization, resource requirements, and any opportunity created by the event.
Use appropriate images and charts where applicable.
Sample Solution
Cyber-attack occurred in a healthcare organization
As the healthcare sector continues to offer life-critical services while working to improve treatment and patient care with new technologies, criminals and cyber threat actors look to exploit the vulnerabilities that are coupled with these changes. The healthcare industry is plagued by a myriad of cybersecurity-related issues. These issues range from malware that compromises the integrity of the systems and privacy of patients, to redistributed denial of service attacks that disrupt facilities` ability to provide patient care. In the fields of computer security and information technology, computer security incident management involves the monitoring and detection of security events or computer network, and the execution of proper responses to those events.
