Reference no: EM133892307

Questions

1. Describe some actions or techniques that can be used to mitigate or stop the impacts of malicious applications. Are some of these methods more effective than others? Provide an example of a cyber attack that resulted from the execution of malicious code. There are plenty of examples that can be queried from the Internet.

2. The NIST CSF (URL: https://www.nist.gov/cyberframeworkLinks to an external site.) was developed to provide "a common language to address and manage cybersecurity risk in a cost-effective way based on business needs without placing additional regulatory requirements on businesses." Do businesses and government agencies need to utilize such a framework to maintain a proper cybersecurity posture? Can an organization mitigate cybersecurity risks without incorporating such a framework? Cite resources and references that back up your assertions.

3. The Health Insurance Portability and Accountability Act (HIPAA) Security Rule establishes a national set of minimum security standards for protecting all electronic private health information (ePHI) that a Covered Entity (CE) and Business Associate (BA) create, receive, maintain, or transmit. The Security Rule contains the administrative, physical, and technical safeguards that CEs and BAs must put in place to secure ePHI. With that in mind, what types of information system components need to be heavily scrutinized to help protect the confidentiality and integrity of ePHI? What types of controls would you recommend implementing to safeguard ePHI? Cite resources and references that back up your assertions.