Task
You work as a security engineer at a health center. The center recently creates a Google website for storing and updating very important documents related to staff and patients. Some doctors reported that some of patient's documents at the website are missing. You are required to assess the information security situation in this health center with a security plan that includes recommendations for improvements.The center manager requested you to analysis and evaluates the center's information security. In addition, you have to propose anew framework for monitoring and protecting the center information.
You must address at least the following in the report.
1. Identify and describe the main categories of information assets for the health sector that may be at risk and have to be protected.
2. Appraise the actual and potential threats to the vulnerabilities of the assets.
3. Evaluate the challenges in information security related to the use of website.
4. Discuss the techniques can be used for automatic monitoring and alerting of unusual activities on the website.
5. Review the recent prevention techniques to be used to protect the center information.
6. Analyse the threats and data privacy issues related to the use of public web server.
7. Develop a security plan that describes counter-measures that will manage the threats that put the center information assets at risk from a risk management perspective.
8. Develop a comprehensive information security education and awareness program. The program must include training, education, awareness and outreach must be developed to deliver a multitude of security messages to all employees according to their responsibilities.
9. Propose and explain the framework for storing, monitoring and protecting the health center information with the support of diagrams.
10. Recommendations you can make to improve the information security situation of the company.