CPSC 602 - Assignment 05 - Bruton, Erika

.docx

School

Slippery Rock University of Pennsylvania *

*We aren’t endorsed by this school

Course

485

Subject

Information Systems

Date

Oct 30, 2023

Type

docx

Pages

Uploaded by 3rikab

Assignment 07 (70 points) DUE NOV 5 LastName, FirstName Read Chapter 10 from “Health Informatics Practical Guide” textbook and the NIST 800-30 document, then answer the following questions. In addition to the information from the textbook, make sure to cite other resources in your answers if needed. 1. In your own words, discuss the difference between confidentiality, integrity, and availability (Ch 10. 6 points) (50-100 words) 2. In your own words, discuss the difference between insiders, hacktivist, and organized crime (Ch 10. 6 points) (50-100 words) 3. In your own words, discuss the difference between phishing, shoulder surfing, and tailgating (Ch 10. 6 points) (50-100 words) 4. In your own words, discuss the difference between client protection, application and database protection, and border defense (Ch 10. 6 points) (50-100 words) 5. View the security breaches affecting 500 or more individuals posted on the Office for Civil Rights Website at (https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf ). You can download a copy of the data in a CSV format (icons on top right of the table. You can open it in MS Excel in order to sort data in different ways and answer the questions). What are the common breach types ? What are most common location of breached information ? Are most large breaches intentional or negligent ? In your opinion, which type of breaches presents the greatest risk and why ? (Ch 10. 10 points) 6. In your own words, discuss the steps in the risk assessment process (NIST 800-30 18 points) (350-450 words) 7. In your own words, describe different options for risk mitigation (NIST 800-30 6 points) (100- 150 words) Evaluation Guidelines 4 3 2 1 Clearly & effectively responds to the assignment. Response to assignment generally adequate & thorough. Minimally responds to the assignment. Does not respond well to the assignment. Ideas are persuasively organized and developed. Ideas are effectively organized and developed. Ideas are adequately organized and developed Ideas are superficially organized and developed. Assignment is supported by a variety of relevant facts, examples, & illustrations from experience. Assignment is well- supported by facts, examples, & illustration. Assignment is generally supported by facts, examples, & details. Assignment is supported by few facts, examples, details. Language is very clear, effective, carefully chosen and precise, with a high degree of accuracy in grammar, vocabulary and Language is clear and carefully chosen, with a good degree of accuracy in grammar, vocabulary and sentence construction Language is sometimes clear and carefully chosen; grammar, vocabulary and sentence construction are fairly Language is rarely clear and appropriate; there are many errors in grammar, vocabulary and sentence construction

sentence construction. accurate, although errors and inconsistencies are apparent Source material incorporated logically & insightfully. Sources are documented accurately. Source material incorporated logically. Sources documented accurately. Source material incorporated adequately & usually documented accurately. Source material incorporated but sometimes inappropriately or unclearly. Documentation is accurate only occasionally.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version