Assignment Prompt & Instructions
## **It’s All About the Process**
– 2 years ago
**files (1)**
– ## Module5.docx
**## Module5.docx**
**Module 3: It’s All About the Process**
For this assignment, you will need to review the Case Study presented and go through the process of completing a risk analysis to identify the security threats, determine the potential impacts of these risks and provide recommended strategies to minimize them.
Expand AllPanels Collapse AllPanels
[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787154?module_item_id=15516831)
DeVry Regional Medical Center provides emergency care, generalized surgical services, and has multiple outpatient clinics as part of their healthcare facility. DeVry Regional Medical Center has just completed their implementation of a new integrated health information system (HIS) to improve the coordination of their patient care and for streamlined data management. During the final stages of implementation, it was discovered that there are some security concerns that will need to be resolved.
The Information Systems (IS) Implementation Team identified the following deficiencies during their final evaluation of the overall network as the final phases of implementation were live. They discovered that there were inadequate access controls, potential network security vulnerabilities, along with discovering that DeVry Regional Medical Center does not have any type of comprehensive incident response plan in place. As the IS Implementation Team Lead, you have been asked to collaborate with the head of their IT Department to conduct a full risk analysis to identify and mitigate these security threats that have come to their attention.
[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787154?module_item_id=15516831)
As the IS Implementation Team Lead, you are to perform a detailed risk analysis of the overall DeVry Regional Medical Center’s information system and network. You have been asked to identify any specific security threats identified during your risk analysis, evaluating the impact of these risks, and to recommend strategies that can be put into place to reduce them.
**Steps you will complete the following as part of your risk analysis report:**
1. Review the health information system implementation to report out on all potential security threats you identify.
2. You will analyze the potential impact of each identified threat. Take into consideration the impact to patient care, data integrity, and system availability.
3. Create 3-4 specific recommendations that addresses each threat (i.e., weak access controls, issues with network security, lack of an incident response plan in place).
Your deliverable method can be either in the form of a half-page to full page report or PowerPoint slides that outline each of the risk analysis steps you completed with your recommendations for addressing the threats. For PowerPoint slides, the slides should outline your key points/recommendations and utilize the Notes section under your slides to provide complete sentences for your report as if you were presenting to a board for approval to implement.
Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.
**Action**
Select the Start Assignment button to begin.
Once you have uploaded your file, select Submit Assignment.
**Rubric**
**M3 It's All About the Process**
| | | | |
| — | — | — | — |
| M3 It's All About the Process |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Paper Option<br>-Uses standard double-spacing without extra spaces between bullets or paragraphs<br>-Minimum length 1/2 page, maximum length 1 page<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable<br>PowerPoint Option<br>-No more than 5 bullets per slide<br>-Keep slides uncluttered so easy to follow<br>-Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes)<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list on a reference slide IF applicable | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all paper or PowerPoint parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable | **5 pts**<br>**In Progress**<br>Student submission mostly meets paper or PowerPoint parameters -1-3 grammatical & spelling errors -Uses some APA in-text citations and reference list IF applicable | **3 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper or PowerPoint parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 7 pts |
| This criterion is linked to a Learning OutcomeSecurity Threats<br>Security Threats<br>-Risk Analysis includes identification of all potential security threats | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly contains list of potential security threats as part of a Risk Analysis | **6 pts**<br>**In Progress**<br>Student submission mostly identifies the potential security threats as part of a Risk Analysis – may be lacking identification of some of threats | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly identify security threats as part of a Risk Analysis | **0 pts**<br>**No Evidence**<br>Student submission is off topic or does not clearly identify security threats as part of a Risk Analysis | | 9 pts |
| This criterion is linked to a Learning OutcomeThreat Impact Analysis<br>Threat Impact Analysis<br>-A clear analysis of the potential impact of each identified threat is provided<br>-Focuses on impacts to patient care, data integrity, and system availability | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly identifies the potential impact of each identified threat | **6 pts**<br>**In Progress**<br>Student submission mostly contains an analysis of the potential impact of each of the threats – analysis of impacts may be lacking details | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly provide a defined analysis of potential impact of the threats | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations for analyzing threat impacts or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeRecommendations<br>Recommendations<br>-For each identified threat offers 3-4 specific recommendations to address each threat<br>-Focuses on weak access controls, issues with network security, lack of an incidence response plan<br>CO3 | | | | | |
| — | — | — | — |
| **10 pts**<br>**Meets or Exceeds**<br>Student submission has clear recommendations for each identified threat offers 3-4 specific recommendations to address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **7 pts**<br>**In Progress**<br>Student submission contains a list of recommendations for identified threat that may not offer 3-4 specific recommendations to clearly address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **4 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly give the 3-4 needed recommendations for identified threats to address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide recommendations for threats or nothing is submitted | | 10 pts |
| Total Points: 35 |
[Previous](https://devryu.instructure.com/courses/118470/modules/items/15516824) [Next](https://devryu.instructure.com/courses/118470/modules/items/15516840)
**## Module5.docx**
**Module 3: It’s All About the Process**
For this assignment, you will need to review the Case Study presented and go through the process of completing a risk analysis to identify the security threats, determine the potential impacts of these risks and provide recommended strategies to minimize them.
Expand AllPanels Collapse AllPanels
[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787154?module_item_id=15516831)
DeVry Regional Medical Center provides emergency care, generalized surgical services, and has multiple outpatient clinics as part of their healthcare facility. DeVry Regional Medical Center has just completed their implementation of a new integrated health information system (HIS) to improve the coordination of their patient care and for streamlined data management. During the final stages of implementation, it was discovered that there are some security concerns that will need to be resolved.
The Information Systems (IS) Implementation Team identified the following deficiencies during their final evaluation of the overall network as the final phases of implementation were live. They discovered that there were inadequate access controls, potential network security vulnerabilities, along with discovering that DeVry Regional Medical Center does not have any type of comprehensive incident response plan in place. As the IS Implementation Team Lead, you have been asked to collaborate with the head of their IT Department to conduct a full risk analysis to identify and mitigate these security threats that have come to their attention.
[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787154?module_item_id=15516831)
As the IS Implementation Team Lead, you are to perform a detailed risk analysis of the overall DeVry Regional Medical Center’s information system and network. You have been asked to identify any specific security threats identified during your risk analysis, evaluating the impact of these risks, and to recommend strategies that can be put into place to reduce them.
**Steps you will complete the following as part of your risk analysis report:**
1. Review the health information system implementation to report out on all potential security threats you identify.
2. You will analyze the potential impact of each identified threat. Take into consideration the impact to patient care, data integrity, and system availability.
3. Create 3-4 specific recommendations that addresses each threat (i.e., weak access controls, issues with network security, lack of an incident response plan in place).
Your deliverable method can be either in the form of a half-page to full page report or PowerPoint slides that outline each of the risk analysis steps you completed with your recommendations for addressing the threats. For PowerPoint slides, the slides should outline your key points/recommendations and utilize the Notes section under your slides to provide complete sentences for your report as if you were presenting to a board for approval to implement.
Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.
**Action**
Select the Start Assignment button to begin.
Once you have uploaded your file, select Submit Assignment.
**Rubric**
**M3 It's All About the Process**
| | | | |
| — | — | — | — |
| M3 It's All About the Process |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Paper Option<br>-Uses standard double-spacing without extra spaces between bullets or paragraphs<br>-Minimum length 1/2 page, maximum length 1 page<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable<br>PowerPoint Option<br>-No more than 5 bullets per slide<br>-Keep slides uncluttered so easy to follow<br>-Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes)<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list on a reference slide IF applicable | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all paper or PowerPoint parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable | **5 pts**<br>**In Progress**<br>Student submission mostly meets paper or PowerPoint parameters -1-3 grammatical & spelling errors -Uses some APA in-text citations and reference list IF applicable | **3 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper or PowerPoint parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 7 pts |
| This criterion is linked to a Learning OutcomeSecurity Threats<br>Security Threats<br>-Risk Analysis includes identification of all potential security threats | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly contains list of potential security threats as part of a Risk Analysis | **6 pts**<br>**In Progress**<br>Student submission mostly identifies the potential security threats as part of a Risk Analysis – may be lacking identification of some of threats | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly identify security threats as part of a Risk Analysis | **0 pts**<br>**No Evidence**<br>Student submission is off topic or does not clearly identify security threats as part of a Risk Analysis | | 9 pts |
| This criterion is linked to a Learning OutcomeThreat Impact Analysis<br>Threat Impact Analysis<br>-A clear analysis of the potential impact of each identified threat is provided<br>-Focuses on impacts to patient care, data integrity, and system availability | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission clearly identifies the potential impact of each identified threat | **6 pts**<br>**In Progress**<br>Student submission mostly contains an analysis of the potential impact of each of the threats – analysis of impacts may be lacking details | **3 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly provide a defined analysis of potential impact of the threats | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations for analyzing threat impacts or nothing submitted | | 9 pts |
| This criterion is linked to a Learning OutcomeRecommendations<br>Recommendations<br>-For each identified threat offers 3-4 specific recommendations to address each threat<br>-Focuses on weak access controls, issues with network security, lack of an incidence response plan<br>CO3 | | | | | |
| — | — | — | — |
| **10 pts**<br>**Meets or Exceeds**<br>Student submission has clear recommendations for each identified threat offers 3-4 specific recommendations to address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **7 pts**<br>**In Progress**<br>Student submission contains a list of recommendations for identified threat that may not offer 3-4 specific recommendations to clearly address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **4 pts**<br>**Little Evidence**<br>Student submission is off topic or does not clearly give the 3-4 needed recommendations for identified threats to address each threat and focuses on weak access controls, issues with network security, lack of an incidence response plan | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide recommendations for threats or nothing is submitted | | 10 pts |
| Total Points: 35 |
[Previous](https://devryu.instructure.com/courses/118470/modules/items/15516824) [Next](https://devryu.instructure.com/courses/118470/modules/items/15516840)