Enhancing Network Security in Healthcare: Week 6 Assignment

Week 6 Assignment Cybr 630 InfoSystemsSecurity&Assurance (01) Dr. Bob Carmickle A’Taris Anthony July 29th, 2023

Proverbs 4:6-7 is an appropriate Bible scripture for this essay: "Do not forsake wisdom, and she will protect you; love her, and she will watch over you. The beginning of wisdom is this: Get wisdom. Though it cost all you have, get understanding." This scripture emphasizes the importance of wisdom, understanding, and acquiring knowledge in order to protect and watch over oneself. It resonates with the essay's focus on implementing security measures, training, and maintaining a secure environment to safeguard sensitive patient data in the physician's office network. Network Description: Purpose of the Network: The network is designed to support the operations of a hypothetical physician's office (E., 2021). Its purpose is to facilitate efficient scheduling, billing, storage, and retrieval of patient data, and communication through email (E., 2021). The network provides a reliable and secure infrastructure to enable the smooth functioning of the office and ensure the confidentiality, integrity, and availability of sensitive patient information (E., 2021). Network and Equipment: The network is based on wireless networking using TCP/IP. It consists of the following components (CDW, 2022):

1. Server for Scheduling Software: The server hosts the scheduling software, which enables the office staff to manage patient appointments, track availability, and organize the daily schedule efficiently (Giladi, 2008). Epic Systems is a widely recognized provider of electronic health records (EHR) and medical practice management software. They offer an integrated suite of software solutions designed to streamline various aspects of healthcare operations, including scheduling, patient management, billing, and clinical documentation. Here are a few reasons why some organizations choose Epic Systems for their medical practice management software: 1. Comprehensive Features: Epic Systems offers a wide range of features and functionalities to support the complex needs of healthcare organizations (epic, 2022 ). Their software encompasses various modules, including scheduling, patient registration, billing, clinical documentation, and reporting, allowing for a comprehensive and integrated approach to practice management (epic, 2022) . 2. Interoperability: Epic Systems focuses on interoperability, which is the ability of different systems and software to exchange and use information (epic, 2022 ). They have built a robust network called the "Epic Health Information Exchange" that allows healthcare providers using Epic software to securely share patient data across different organizations, improving care coordination and patient outcomes (epic, 2022) .

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

3. Scalability: Epic Systems' software is known for its scalability, making it suitable for both small clinics and large healthcare systems (epic, 2022 ). It can adapt to the needs of different types and sizes of organizations, allowing for growth and expansion without significant disruptions or the need for extensive system replacements (epic, 2022 ). 4. Industry Reputation: Epic Systems has gained a strong reputation in the healthcare industry for its reliable and feature-rich software solutions (epic, 2022 ). Many prominent healthcare organizations, including hospitals and medical groups, have chosen Epic Systems for their practice management needs, which can provide confidence to other organizations considering their software (epic, 2022) . It's worth noting that the selection of a specific software provider, such as Epic Systems, depends on the unique requirements and preferences of each organization (epic, 2022) . Factors such as budget, specific workflow needs, integration requirements, and local market conditions can also influence the decision-making process (epic, 2022) . Therefore, it's essential to thoroughly evaluate different options, conduct demonstrations or trials, and consider input from stakeholders when choosing a medical practice management software provider (epic, 2022 ). 2. Server for Billing: The billing server is responsible for managing the office's financial transactions, including generating invoices, processing payments, and maintaining billing records (Giladi, 2008). 3. Server with Oracle 12 Database:

This server hosts the Oracle 12 database, which is the central patient data repository. It securely stores electronic health records, medical history, diagnoses, and treatment plans (Admin, 2023). 4. Server for Microsoft Exchange Email: The email server runs Microsoft Exchange Email, providing reliable and secure email communication for the office. It allows doctors, staff, and other authorized personnel to send and receive emails within the office network and externally (E., 2021). 5. Patient Rooms: There are 10 patient rooms in the office, each equipped with a desktop computer running the Windows 10 operating system (E., 2021). These computers provide access to patient records, enable data entry, and support communication with the central servers (E., 2021). Security Measures: To ensure the security of the network and protect sensitive patient information, the following security measures are in place (E., 2021): 1. Access Controls: User access is granted on a need-to-know basis, and each user has a unique login ID and strong password. Role-based access control (RBAC) is implemented to restrict access to specific systems and data based on job responsibilities (E., 2021). 2. Data Encryption:

Sensitive data, such as patient records and billing information, is encrypted both during transit and at rest. This safeguards the confidentiality and integrity of the data and prevents unauthorized access (E., 2021). 3. Network Segmentation: The network is segmented to separate critical systems, such as the patient database server, from other network segments. This helps contain potential breaches and limits the impact of any security incidents (Popov & Lukhanin, 2021). 4. Firewall and Intrusion Detection/Prevention System (IDS/IPS): A firewall is deployed to monitor and control incoming and outgoing network traffic. An IDS/IPS is implemented to detect and prevent unauthorized access attempts and suspicious activities within the network (E., 2021). 5. Regular Updates and Patch Management: Servers, network devices, and endpoints receive regular updates and security patches to address known vulnerabilities and protect against emerging threats. This helps maintain the security and stability of the network (Popov & Lukhanin, 2021). 6. Data Backup and Disaster Recovery: Regular backups of patient data and system configurations are performed to ensure data availability and facilitate disaster recovery in case of any unforeseen events or system failures (E., 2021).

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

7. Security Awareness and Training: All employees undergo security awareness training to promote a culture of security and educate them about best practices for handling sensitive information, recognizing social engineering attacks, and reporting any security incidents (E., 2021). By implementing these security measures, the network provides a robust and secure environment to support the operations of the physician's office while safeguarding patient data and maintaining regulatory compliance (E., 2021). The Network Diagram Mediacom serves as the internet service provider (ISP) for both the corporate office and the Home office. At the Corporate office, a router with a firewall is deployed to safeguard the incoming and outgoing network traffic within its boundaries. This setup acts as a contingency plan in case the home office system experiences any disruptions. The Home office comprises a router equipped with firewall protection. Additionally, a switch is implemented, which supports three virtual private networks (VPNs). Vlan 1 is dedicated to the ten office desktop computers and is restricted from accessing vlan2/vpn2 or vlan3/vpn3.

Vlan 2 hosts the scheduling server, which utilizes Epic Systems software for managing schedules. Furthermore, it houses servers responsible for billing and Microsoft Exchange email services. The scheduling, billing, and email tasks are facilitated through the secure network using the Microsoft Office application. Vlan 3 is allocated for HIPAA compliance and contains confidential patient information. This network segment is isolated from external internet access to ensure the privacy and security of the sensitive data.

Epic Systems for scheduling

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

As a physician's office handling sensitive patient information, it is crucial to adhere to the security and privacy requirements outlined by the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act (OCR, 2022). These requirements apply to the network boundary and encompass both technical and administrative safeguards (OCR, 2022). Here are some key security and privacy requirements: 1. Access Control: Implement strong access controls to ensure that only authorized individuals can access patient information. This includes unique user IDs, passwords, two-factor authentication, and role-based access controls to restrict access based on job responsibilities (NIST, 2014). 2. Encryption: Utilize encryption techniques to protect patient data both in transit and at rest. This includes encrypting data transmitted over public networks (e.g., the Internet) and encrypting data stored on devices and servers (NIST, 2014). 3. Firewall Protection:

Deploy firewalls to secure the network boundary and prevent unauthorized access to patient information. Configure the firewall to restrict incoming and outgoing network traffic and regularly update and patch firewall systems (13 et al., 2023). 4. Intrusion Detection and Prevention: Implement intrusion detection and prevention systems (IDPS) to monitor network traffic for any suspicious or malicious activities. This helps in identifying and preventing unauthorized access attempts or network breaches (13 et al., 2023). 5. Physical Security: Ensure physical security measures are in place to protect the network infrastructure. This includes securing server rooms, restricting access to authorized personnel, and monitoring physical access through surveillance systems or access control mechanisms (NIST, 2014). 6. Risk Assessment and Management: Conduct regular risk assessments to identify vulnerabilities and threats to the network boundary. Develop and implement risk management strategies to mitigate identified risks and ensure ongoing security of patient information (NIST, 2014). 7. Incident Response: Establish an incident response plan to respond to security incidents or breaches promptly and effectively. This includes procedures for reporting, investigating, and

mitigating security incidents, as well as notifying affected individuals as required by HIPAA (OCR, 2022). 8. Privacy Policies and Procedures: Develop and enforce privacy policies and procedures to safeguard patient information. This includes policies for data access, disclosure, and sharing, as well as guidelines for handling patient records and obtaining patient consent (OCR,2022). 9. Employee Training: Train employees regularly on HIPAA regulations, security best practices, and privacy awareness. Employees should be educated on their patient data protection responsibilities, including securely handling and sharing patient information (OCR,2022). 10. Business Associate Agreements: If the physician's office works with third-party vendors or service providers (known as business associates) who handle patient information, ensure that appropriate business associate agreements are in place ((OCR, 2022). These agreements establish the responsibilities and requirements for protecting patient data ((OCR, 2022). It is essential to regularly review and update security measures to align with evolving threats and technological advancements. Consulting with legal and cybersecurity experts experienced in HIPAA compliance can provide further guidance specific to your physician's office's unique requirements (OCR, 2022).

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

One relevant verse that highlights the importance of integrity and stewardship is Proverbs 25:2, which states: "It is the glory of God to conceal a matter, but the glory of kings is to search out a matter." This verse emphasizes the responsibility of those in positions of authority or entrusted with important matters to diligently seek out and protect information. It reflects the idea that it is honorable and praiseworthy to guard and manage confidential information, just as it is for kings to uncover the truth and administer justice.

Week 3 assignment Proverbs 4:23 - "Above all else, guard your heart, for everything you do flows from it." While this verse primarily speaks about guarding one's heart, it reminds us of the significance of safeguarding what is important and valuable. In the context of the essay, it can be seen as a reminder to protect sensitive data, such as patient information, by implementing appropriate security measures to ensure its integrity and confidentiality. NIST SP 800-53 rev 4 is a comprehensive publication that provides a set of security controls and guidelines for federal information systems in the United States (Initiative, 2015). While it is not specifically tailored for physician's offices, it can still serve as a valuable resource to enhance security measures and protect HIPAA data (Initiative, 2015). By referring to this document, you can identify relevant controls and best practices to implement in your physician's office environment. For the purpose of addressing controls related to the network boundary, let's focus on two control families: Access Control (AC) and System and Communications Protection (SC). 1. Access Control (AC): Control: AC-4 (Access Control for Transmission Medium) Explanation: AC-4 focuses on ensuring that access to information transmitted over network mediums is appropriately controlled and protected (OCR, 2022). To address this control,

you can employ measures such as implementing secure network protocols (e.g., encrypted communications) to safeguard sensitive data during transmission. Additionally, deploying firewalls, intrusion detection systems, and other network security technologies can help monitor and control access to the network boundary (OCR, 2022). Control: AC-6 (Lease Privilege) Explanation: AC-6 emphasizes the importance of granting users only the privileges necessary to perform their authorized tasks and responsibilities (OCR, 2022). To adhere to this control, you can implement a least-privilege approach for network access (OCR, 2022). This involves assigning users the minimum set of privileges required to fulfill their duties, reducing the risk of unauthorized access or accidental misuse of sensitive data at the network boundary (OCR, 2022). Regular access reviews, strong authentication mechanisms, and centralized identity and access management systems can aid in enforcing the principle of least privilege (OCR, 2022). 2. System and Communications Protection (SC): Control: SC-7 (Boundary Protection) Explanation: SC-7 aims to establish and maintain effective boundary protections for information systems (CSF TOOLS, 2021). To address this control, you can implement measures such as network segmentation, where logical or physical barriers are introduced to separate the physician's office network from external networks (CSF TOOLS, 2021). Deploying firewalls, intrusion prevention systems, and implementing network zoning can further enhance boundary protection (CSF TOOLS, 2021). Additionally, monitoring network traffic and conducting regular

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

vulnerability assessments can help detect and mitigate potential threats at the network boundary (CSF TOOLS, 2021). Control: SC-8 (Transmission Confidentiality and Integrity) Explanation: SC-8 focuses on protecting the confidentiality and integrity of information during transmission (CSF TOOLS, 2021). To adhere to this control, you can employ encryption mechanisms for sensitive data transmitted across networks (CSF TOOLS, 2021). Utilizing secure communication protocols, such as Transport Layer Security (TLS) or Virtual Private Networks (VPNs), can ensure that information exchanged between the physician's office and external entities remains encrypted and protected from unauthorized access or tampering (CSF TOOLS, 2021). By implementing the controls outlined in the Access Control (AC) and System and Communications Protection (SC) families, you can bolster the security of your physician's office network boundary, mitigate risks, and protect the confidentiality, integrity, and availability of HIPAA data (CSF TOOLS, 2021). Remember to tailor these controls to the specific needs and requirements of your environment and regularly update your security measures to align with emerging threats and best practices (CSF TOOLS, 2021).

Week 4 assignment It is important to consult the official DOD STIG documentation and work with IT security professionals who have expertise in Oracle server hardening to ensure compliance with specific requirements. Here are 20 controls to consider: 1. Implement strong password policies and enforce regular password changes (SteelHeadTM, 2022) . 2. Enable account lockout policies to prevent brute-force attacks (SteelHeadTM, 2022) . 3. Limit administrative privileges and implement the principle of least privilege (SteelHeadTM, 2022) . 4. Implement secure network architecture with proper segmentation and firewalls (SteelHeadTM, 2022) . 5. Enable and configure auditing and logging features to monitor server activity (SteelHeadTM, 2022) . 6. Regularly apply security patches and updates provided by Oracle (SteelHeadTM, 2022) . 7. Implement secure communication protocols like SSL/TLS for encrypted connections (SteelHeadTM, 2022) . 8. Disable or remove unnecessary database services and features (SteelHeadTM, 2022) .

9. Implement strong authentication mechanisms such as multi-factor authentication (SteelHeadTM, 2022) . 10. Regularly backup and encrypt database backups (SteelHeadTM, 2022) . 11. Use secure encryption methods for sensitive data stored in the database (SteelHeadTM, 2022) . 12. Implement database and file system encryption for data-at-rest protection (SteelHeadTM, 2022) . 13. Restrict and monitor network access to the Oracle server (SteelHeadTM, 2022) . 14. Implement intrusion detection and prevention systems (SteelHeadTM, 2022) . 15. Use secure configurations for database parameters and options (SteelHeadTM, 2022) . 16. Employ secure coding practices and conduct regular code reviews (SteelHeadTM, 2022) . 17. Monitor and limit database user privileges and roles (SteelHeadTM, 2022) . 18. Implement secure database connections using Oracle Advanced Security (SteelHeadTM, 2022) . 19. Perform regular vulnerability assessments and penetration testing (SteelHeadTM, 2022) . 20. Establish and enforce data access and retention policies (SteelHeadTM, 2022) . In the physician's office network setup described in week 1 assignment, it's important to ensure that the Oracle server is hardened to maintain the security of patient data and sensitive information. Here are some considerations for hardening the Oracle server in this environment:

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

1. Implement strong password policies and enforce regular password changes: Set strong password requirements for Oracle server accounts and enforce regular password changes to prevent unauthorized access (SteelHeadTM, 2022). 2. Limit administrative privileges and implement the principle of least privilege: Restrict administrative privileges on the Oracle server to only authorized personnel and adhere to the principle of least privilege, granting users only the necessary privileges to perform their specific tasks (SteelHeadTM, 2022). 3. Regularly apply security patches and updates provided by Oracle: Stay up to date with Oracle's security patches and updates to address any known vulnerabilities and ensure the server is protected against potential exploits (SteelHeadTM, 2022). 4. Implement secure communication protocols: Enable SSL/TLS encryption for client-server communication with the Oracle server to ensure the confidentiality and integrity of data transmitted over the network (SteelHeadTM, 2022). 5. Use secure encryption methods for sensitive data stored in the database: Utilize Oracle's built- in encryption features to protect sensitive data at rest within the database (SteelHeadTM, 2022). 6. Employ secure coding practices: Follow secure coding guidelines when developing or customizing applications that interact with the Oracle server to prevent common security vulnerabilities and protect against potential attacks (SteelHeadTM, 2022).

7. Monitor and limit database user privileges and roles: Regularly review and audit user privileges and roles assigned within the Oracle server, ensuring that users only have the necessary access required for their specific tasks (SteelHeadTM, 2022). 8. Enable auditing and logging features: Configure auditing and logging features in the Oracle server to track and monitor user activities and detect any suspicious or unauthorized actions (SteelHeadTM, 2022). 9. Perform regular vulnerability assessments and penetration testing: Conduct periodic assessments and penetration testing on the Oracle server to identify and address any potential vulnerabilities or weaknesses in its configuration (SteelHeadTM, 2022). 10. Establish and enforce data access and retention policies: Develop and enforce policies regarding data access and retention, outlining who can access patient data and for how long, ensuring compliance with privacy regulations such as HIPAA (SteelHeadTM, 2022). These are some general considerations for hardening an Oracle server in a physician's office. It's important to consult with IT security professionals who have expertise in Oracle server security and consider specific industry regulations and best practices to ensure the highest level of security for patient data and sensitive information.

Proverbs 11:14 (NIV): "For lack of guidance a nation falls, but victory is won through many advisers." This verse reminds us of the value in seeking advice and expertise from knowledgeable individuals, such as IT security professionals, to make informed decisions and ensure the security and success of an endeavor. Week 5 Preparing for an audit of the system for HIPAA (Health Insurance Portability and Accountability Act) compliance is crucial to ensure that your organization is adhering to the necessary regulations and protecting sensitive healthcare information (Karn, 2023). Below is a list of documents you should have prepared for the upcoming audit, along with an explanation of their importance: 1. **HIPAA Policies and Procedures**: This document outlines your organization's policies and procedures related to the protection of patient information, employee training, breach notification, data access controls, and more (Karn, 2023). It demonstrates that you have established guidelines for safeguarding protected health information (PHI) and have measures in place to ensure compliance (Karn, 2023). 2. **Risk Assessment Report**: A risk assessment identifies potential vulnerabilities and threats to the security of PHI within your system (Karn, 2023). It assesses the likelihood and impact of these risks and outlines the measures taken to mitigate them (Karn, 2023). The audit will check if

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

you have a comprehensive risk assessment and have addressed the identified risks appropriately (Karn, 2023). 3. **Security Incident Response Plan**: This plan outlines the steps your organization will take in the event of a security breach or data breach involving PHI (Karn, 2023). It should include procedures for containment, investigation, notification, and recovery (Karn, 2023). The audit will ensure that you have a well-defined incident response plan to handle any security incidents effectively (Karn, 2023). 4. **Business Associate Agreements (BAAs)**: If your organization shares PHI with third-party vendors or contractors (business associates), you must have signed BAAs with them (Karn, 2023). These agreements outline the responsibilities of each party regarding the protection of PHI and compliance with HIPAA regulations (Karn, 2023). 5. **Employee Training Records**: Training your staff on HIPAA policies and procedures is essential (Karn, 2023). You should maintain records of employee training sessions and the topics covered (Karn, 2023). The audit will verify that all relevant staff members have received adequate training (Karn, 2023). 6. **Access Logs and Controls**: Access logs provide a record of who accessed PHI, when, and what changes were made (Karn, 2023). These logs help ensure accountability and detect any unauthorized access (Karn, 2023). The audit will assess whether access controls are in place and appropriate for each user's role (Karn, 2023).

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

7. **Physical Security Measures**: HIPAA compliance also includes physical security (Karn, 2023). Documentation regarding physical access controls, video surveillance, and measures to prevent unauthorized physical access to PHI should be prepared (Karn, 2023). 8. **Disaster Recovery and Contingency Plans**: These documents outline how your organization will handle data backup, recovery, and continuity of operations in case of a disaster or system failure (Karn, 2023). The audit will assess the effectiveness of these plans in ensuring PHI's integrity and availability (Karn, 2023). 9. **Encryption and Data Security**: Information about encryption methods used to protect data at rest and in transit should be available (Karn, 2023). This ensures that even if data is compromised, it remains unreadable without the appropriate decryption keys (Karn, 2023). 10. **HIPAA Breach Notification Logs**: Any past incidents of security breaches or data breaches involving PHI, along with the notifications sent to affected individuals, should be documented (Karn, 2023). 11. **Security Awareness and Privacy Notices**: Your organization's privacy notice should be readily available to patients and should inform them about how their information will be used, disclosed, and protected (Karn, 2023). Scans to run on the system:

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

1. **Vulnerability Assessment**: Conduct a vulnerability assessment scan to identify and prioritize potential weaknesses in your system. It helps you proactively address security vulnerabilities before they are exploited by attackers (Rosencrance, 2021). 2. **Penetration Testing**: Penetration testing involves simulating real-world attacks on your system to assess its security posture (Rosencrance, 2021). This test helps identify potential entry points for attackers and determines the effectiveness of your security measures (Rosencrance, 2021). 3. **Log Analysis**: Review and analyze system logs, including access logs, audit logs, and error logs. This helps detect any suspicious activities or potential security breaches (Rosencrance, 2021). 4. **Network Security Scan**: Perform a network security scan to identify open ports, vulnerabilities, and potential misconfigurations that could compromise the security of your network (Rosencrance, 2021). 5. **Malware and Antivirus Scans**: Run regular malware and antivirus scans on your systems to detect and remove any malicious software that could lead to data breaches or compromise the integrity of PHI (Rosencrance, 2021) ).

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

6. **Data Loss Prevention (DLP) Scan**: Implement DLP scanning to monitor and prevent sensitive data (like PHI) from being transmitted or shared outside authorized channels (Rosencrance, 2021). 7. **Encryption Check**: Verify that encryption is properly implemented for sensitive data at rest and in transit (Rosencrance, 2021). This ensures that even if there is unauthorized access, the data remains protected and unusable without decryption keys (Rosencrance, 2021) . Remember, the key to a successful HIPAA compliance audit is not just having the necessary documents and scans but also being able to demonstrate that your organization actively follows its policies and procedures and takes the security and privacy of PHI seriously (Rosencrance, 2021). The essay primarily covers practical guidelines and recommendations for safeguarding patient data and ensuring compliance with HIPAA regulations. However, a Bible verse that emphasizes the importance of integrity, responsibility, and accountability in handling sensitive information is Proverbs 27:23-24 (NIV): "Be sure you know the condition of your flocks, give careful attention to your herds; for riches do not endure forever, and a crown is not secure for all generations." While this verse doesn't mention HIPAA or healthcare information explicitly, it speaks to the need for diligence in managing and protecting what is entrusted to us. In the context of the essay,

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

it can be a reminder to healthcare organizations to be vigilant in safeguarding patient data and maintaining compliance with regulations. Reference: Admin. (2023). OS. The Geek Diary. https://www.thegeekdiary.com/oracle-database-server-architecture- overview/#:~:text=There%20are%20three%20major%20structures,physical%20structures %20and%20logical%20structures Boundary Protection - CSF Tools. CSF Tools - The Cybersecurity Framework for Humans. (2021a, March 5). https://csf.tools/reference/nist-sp-800-53/r4/sc/sc-7/

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

CDW. (2022, August 8). Network Protocols & How They Can Benefit Your Business. CDW.com. https://www.cdw.com/content/cdw/en/articles/networking/types-of-network- protocols.html#1 E., S. B. S. (2021). chpt 1. In Securing Systems: Applied Security Architecture and Threat Models (pp. 3–26). essay, ROUTLEDGE. epic. (2022). Our software. Epic. https://www.epic.com/software ( Eugenia Lostri , James Andrew Lewis , and Georgia Wood, 2022). (2022, May). Cybersecurity supply chain risk management practices for systems ... - NIST. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161r1.pdf F. A. R. W. N. D. J., Director, R. W. N., 13, J., Writer, A. C. S. N., 21, J., Writer, A. W. N., 22, J., Security, D. S. V., Editor, K. J. T., 05, J., Cobb CISSP-ISSAP, M., & 16, J. (2023, June 13). Security information, news, and tips from TechTarget. https://www.techtarget.com/searchsecurity/ Initiative, J. T. F. T. (2015, January 22). Security and privacy controls for Federal Information Systems and organizations. CSRC. https://csrc.nist.gov/publications/detail/sp/800-53/rev- 4/archive/2015-01-22 Karn, J. (2023, June 20). How to prepare for a HIPAA audit. Total HIPAA Compliance. https://www.totalhipaa.com/how-to-prepare-for-a-hipaa-audit/ (OCR), O. for C. R. (2022, October 20). Summary of the HIPAA security rule . HHS.gov. https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Popov, A., & Lukhanin, V. (2021). Algorithm for create network diagrams for planning maintenance of agricultural machines. E3S Web of Conferences, 285, 7020–. https://doi.org/10.1051/e3sconf/202128507020 Rosencrance, L. (2021, September 24). What is a vulnerability assessment (vulnerability analysis)? definition from searchsecurity. Security. https://www.techtarget.com/searchsecurity/definition/vulnerability-assessment- vulnerability-analysis SteelHeadTM . (202AD, September 1). Riverbed documentation. https://support.riverbed.com/bin/support/static/4l9ff7f7cobjbvn5vhllct0i6g/html/ nmd18c7941qvl56ia6sa7id28/rvbd-stigs-ag-html/index.html#page/rvbd-compliance-federal %2Frvbd-stigs-html%2Frvbd-stigs-overview.html%23ww317127 Transmission confidentiality and integrity - CSF tools. CSF Tools - The Cybersecurity Framework for Humans. (2021, March 5). https://csf.tools/reference/nist-sp-800-53/r4/sc/sc-8/

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

week 5 assignment

Related Documents