Who are the cyber security stakeholders in this who -why-when and how High Mountain Orthodontics andCosmetic DentistryOrganization OverviewHigh Mountain Orthodontics and Cosmetic Dentistry7439 Center Ave, Meridian CA 534641-800-555-1212www.yourbeautifulsmile.comHigh Mountain Orthodontics and Cosmetic Dentistry(HMOCD) has been in business for ten years. It is aprivately held dental service where the five dentists andtwo orthodontists have mutual business shares. The twomost recently hired dentists, Dr. Smith and Dr. Jones,specializing in cosmetic dentistry.Dr. Smith and Dr. Jones have convinced the other ownersof the business there is an opportunity to rapidly growthe business gross by 25% by heavily investing in new andcostly cosmetic dentistry equipment, expanding the website, adding specialty cosmetic devices that attach to thenetwork, and a photo area for before and after picturesof patients and their beautiful new teeth.Vernon Vance, a recently graduated college student withexcellent development and programming skills, has beenhired to expand the website and integrate a mobileapplication.A cosmetic dentistry sales team has been built over thelast six months.HMOCD has a digital first strategy, and patients can log into view their accounts from the website and the mobileapplication. There is a feature in the mobile app wherepatients can view options for new teeth, view before andafter predicted results for both Veneers or teethwhitening. Patients can also book appointments and opt-in for mobile reminders for upcoming appointments.There is a total of 50 employeesoooFive dentistsTwo orthodontistsSix X-Ray techniciansOFive receptionistso One office manager, Tammy ThompsonTen dental hygienistsFive dental assistantsTwo dental technicians10 salespeople who find clients for theteeth whitening and cosmetic dentalsurgeryo 3 IT people (1 developer who isresponsible for changes to the website,new integrations, mobile application)One security person - Bob Bean HMOCDCybersecurityoOCOThe gross revenue for High Mountain Orthodontics andCosmetic Dentistry (HMOCD) is $6,216,370. Theoperating expense for the business is $4,424,330.0.Sales of teeth care products is another area of activegrowth. The products are sold in the office or bepurchased from the website. The products include teethwhitening, fresh breath, special floss, toothbrushes, andteeth-safe gum.Cosmetic dentistry is the most profitable part of thebusiness, although the primary revenue is still thestandard dentistry and orthodontics services. TheOpenDental application is critical to support the businesssince it manages all the patient information. The officeVOIP phones are also critical to the business since it isstill the primary method used by patients tocommunicate with the office.Payment options for clients are cash, credit card, orcheck. Credit cards can be used in the office, on thewebsite, and through the mobile application. They use acredit card processing service for all credit cardtransactions.EmployeesTammy Thompson is the office manager and isresponsible for all human resource related tasks,including hiring, employee reviews, pay, and employeediscipline tasks. She is also the person responsible for allfinancial aspects of the business. Any budget requests must be approved by her. Tammy is also responsible forall social media posts for HMOCD.Tammy is the only person allowed to post about HMOCDon social media. Due to the sensitive nature of theirbusiness, all other employees are required to read andsign a "Do not post any information about HMOCD topersonal social media accounts" agreement when theyare hired.John Jones from JJ and J Legal is not an employee ofHMOCD but is on retainer to provide legal services forHMOCD and is responsible for legal and compliancecounsel to the business.The IT team consists of four people. Cale Clark, VernonVance, Al Smith, and Bob Bean. Al Smith is the senior ITlead, and Bob Bean is responsible for cyber security.All employees have their own Windows PC withOffice365 fully migrated to the cloud with email providedfrom the cloud service.There is two wireless access point that provides wirelessservice for both the employees and patients. The physicalwireless access points are not easily accessible bypatients. There is guest wireless provided for patient usewhile they are in the office.The network supports one router and one switch. Thereare four iPads used for patient check-in. The iPads arelocked down and directly connect to a SharePoint sitewith a form created for member check-in. iCloud is usedand has location tracking and wiping with Al Smith as thesystem administrator.Employees can use their personal devices for workaccess, but only if they are managed through Intune.Applications used in the office are:OpenDental 37 licensesSalesforce (all employees)Office365 (all employees)Dropbox (all employees)Web and mobile development tools0There is some tension between Bob Bean and the otheremployees at HMOCD since many of the security changeshe has promoted have caused friction for bothemployees and patients. Examples of recent complaints;Patient and office staff impact due to the roll-out of arecent patch for the router Bob insisted had to bepatched quickly. Bob required it patched within two daysof patch availability due to a newly identifiedvulnerability rated a CVE 9. Because there was notenough time to effectively test compatibility, the patchcaused login failures to the OpenDental application, andone day of appointments had to be rescheduled. Boththe X-ray technicians and the dental technicians havebeen frustrated with lock screen time since they feel itslows them down when they need to log in frequently.The salespeople received a barrage of frustrated callsafter a forced password change to all member portalaccounts and a patch to the SQL database locked upOpenDental and they were forced to roll the patch back.This vulnerability still exists since calls with OpenDentalsupport team have yet to determine why the patch islocking up the SQL database.A person who does appreciate Bob Bean is TammyThompson since he was responsible for recognizing abusiness email compromise attack. Tammy paid aninvoice to what she thought was a legitimate emailinvoice request for payment to one of their smallervendors, Safe Teeth Chewing Gum inc. but Bob and the ITteam were able to recover the funds after spotting somesuspicious activity on her system. Through their IncidentResponse investigation, they discovered the fake emailand were able to work with their bank and recover thefunds before they were transferred to an offshoreaccount.Bob Bean provides a quarterly update to the sevenshared business owners, Tammy Thompson and JohnJones.The quarterly update consists of six slides:(1) Title Slide(2) Overview of the organization, which includesbusiness objectives.(3) Existing security controls aligned with the NISTCybersecurity Framework (NIST CSF)(4) Overview of the organization's SecurityAwareness Program(5) Top Threats and Risksa. For the organization segment (Healthcarevertical from the Verizon data breachreport)b. Top threats and risks specific to HMOCD(6) Cybersecurity goals for next quarter.

Cybersecurity is used to protect organization computer/server/devices from cyber attack. Here…

Answered: Who are the cyber security stakeholders…

Who are the cyber security stakeholders in this who -why-when and how

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE