1. Describe your vision for addressing the security requirements in the overall technical design of the ABC Healthcare network. This should include both internal and external (untrusted and trusted) aspects. Untrusted would include user connectivity to the Internet.
The "trusted" network has the main purpose of supporting the business functions of known entities (i.e. partners, suppliers, etc.) which have a business relationship with the company. Note that you are to concentrate on the high level, and you are not expected to provide low level details for your recommended design.
2. Discuss the way you will address requirements for system monitoring, logging, auditing, including complying with any legal regulations.
3. Describe how the system will identify and authenticate all the users who attempt to access ABC Healthcare information resources.
4. Discuss how the system shall recover from attacks, failures, and accidents.
5. Discuss how the system will address User Account Management and related security improvements.