Scenario: You are an IT security intern working for Health Network, Inc. (Health Network), a fictitious health services organization headquartered in Minneapolis, Minnesota. Health Network has over 600 employees throughout the organization and generates $500 million USD in annual revenue. The company has two additional locations in Portland, Oregon and Arlington, Virginia, which support a mix of corporate operations. Each corporate facility is located near a co-location data center, where production systems are located and managed by third-party data center hosting vendors.
Company Products
Health Network has three main products: HNetExchange, HNetPay, and HNetConnect.
HNetExchange is the primary source of revenue for the company. This service handles secure electronic medical messages that originate from its customers, such as large hospitals, which are then routed to receiving customers such as clinics.
Many of the company’s HNetExchange clients manage safe payments and invoices using the HNetPay online interface. The HNetPay online gateway, which is housed at Health Network production facilities, communicates with credit card processing businesses and accepts a variety of payment methods. In order to help Health Network consumers discover the appropriate level of treatment at the appropriate locations, HNetConnect is an online directory that includes listings for physicians, clinics, and other medical institutions. It includes the personal details of the doctors, their workplace addresses, their credentials as physicians, and the range of services that the clinics and doctors provide. Doctors receive credentials and have the ability to edit the data on their profiles. All three of the company’s goods are accessible to Health Network’s clients, who are the hospitals and clinics. Using HTTPS websites that are accessible via the Internet, doctors and prospective patients may update their profiles and make payments. Overview of the Information Technology Infrastructure Three production data centers where Health Network operates offer high availability for all of the business’s products. Around 1,000 production servers are housed in the data centers, while Health Network manages 650 business laptops and employee-owned mobile devices. Threats Recognized Following an evaluation of the present risk management strategy, the following dangers were found: Loss of data due to hardware removal from production systems; Loss of data on lost or stolen company-owned property, such as laptops and mobile devices; Loss of customers due to production outages brought on by various events, such as natural disasters, change management, unstable software, etc.; Internet threats because company products are available online; Insider threats; and Alterations in the regulatory environment that may have an impact on operations Organizational Request Health Network’s senior management has concluded that a new risk management strategy has to be created because the organization’s current one is out of date. Senior management is supportive of the effort to create a new strategy and dedicated to it since risk management is crucial to the firm. It is your responsibility to create this new strategy. During the risk assessment process, when reassessing the present danger environment, additional hazards beyond those already mentioned may be found. Due to senior management’s intention to respond to any and all major risks identified in the new plan, the budget for this project has not yet been established. It is possible to estimate realistic expectations based on the company’s yearly sales.
Deliverables
This project is divided into several parts, each with a deliverable. The first four parts are drafts. These documents should resemble business reports in that they are organized by headings, include source citations (if any), be readable, and be free from typos and grammatical errors. However, they are not final, polished reports.
WE HAVE DONE THIS QUESTION BEFORE, WE CAN ALSO DO IT FOR YOU
GET SOLUTION FOR THIS ASSIGNMENT, Get Impressive Scores in Your Class
CLICK HERE TO MAKE YOUR ORDER on IT security intern working for Health Network
