Question: Many hospitals accept credit cards for payment of services. If this information is not properly protected, the holder of the credit card (the consumer) may become the victim of identity theft. AssumeMany hospitals accept credit cards for payment of services. If this information is not properly protected, the holder of the credit card (the consumer) may become the victim of identity theft. Assume that HC DataPro Inc. is a technology services provider that focuses on information processing for hospitals.
The "Information Security Officer (ISO)" is responsible for identifying technology risks, coordinating the development of vulnerability identification, remediation, and response, and coordinating technology audits performed by industry regulators. You are to perform research and write a 2 -3-page paper that addresses the following:
1) What set of standards would Technology Hospital have to be in compliance with if they accept credit cards?
2) Under what circumstances do you think Technology Hospital would have to implement the standards?
3) Which regulatory agency would audit the hospital's compliance?
4) Name three potential vulnerabilities that would cause the hospital to be liable for damages if one of their patient's credit card information was compromised.