ABC Health Care - Research Paper Example

? ABC Health Care Task ABC Health Care Question One The main vision of addressing the security problems currently experiencedat the ABC Health Care is to overcome the complications that the company is facing due to the hitches experienced in its networks. The main reason for the health care analysts of the institution in addressing the security requirement poised by the overall technical design requirements of the network is to improve its performance, as well as root out other non-performance factors of the network. The company is losing its hold on the market, as well as missing income flows and revenues from the poor quality of healthcare networks currently operated by the company. As such, the main aim of this analysis of the requirements of technical analysis of the healthcare is to come up with new ways and strategies that would enable the company make the best out of its networks, as is the case for both its trusted as well as untrusted clients. This is a very critical aspect of the new design development as it enables the company to maintain high security levels. As such, this control of accessibility for both legitimate as well as malicious users of the system forms the utmost importance of the safety and security of the management system of ABC Health Care. The threat that the company faces through the usage of improper management systems does not remain solely to the outside malicious users. However, this also relates to the legitimate users engages in the illegitimate activities. The securities of the company’s website as well as other critical factors that affect the normal operations of the business are critical in maintaining the security of all systems. The new design of network development would include a high-level performance through the incorporation of consistent delivery system. The new design should include proper support systems of the business as well as bridge a balance the security requirements without introduction of significant overhead and complexities that may arise in network use and development. Other important aspects that the new design of network should address include the possibility of maintenance and enhancement of security without incurring a significant increase in the overheads of management or other related complexities. This also incorporates the implementation of systems that are supported by the industry, such as meeting the appropriate standards set by the industry, as well as being scalable and tolerant to faults. The implementation of the designs should also assist in ensuring compliance with all the applicable regulations within the market as well as within the industry. To close it up, the system should also have proper access control for both legitimate as well as malicious users. In order to achieve maximum success through the proper usage of the network systems of the ABC Health Care, the analysts should consider the all the related factors to the development of a consistent network system that ensures proper returns as well as provide its clients with the best service deliveries. In addition, the company should also include both internal as well external aspects of network development in improving its technical designs. This is through the considerations that the untrusted aspects of network connectivity would include connectivity of users to the internet, whereas the trusted network would mainly deal with the purpose of supporting all business functions, as well as ensuring that the company overcomes it current flaws in network connectivity. Some of the composite business function that this new vision should address would include the suppliers of the company, as well as the partners. These persons or groups have a secure business relationship with the company and assist in its day-to-day operations for culmination into a successful end of a fiscal year. The system designers can also come up with a Network Intrusion Prevention System appliance in order to maintain and uphold the security of the health care system. This is a system appliance designed to stop on a constant basis all the evolving threats before they have any impact on the operations of the business. As such, the provision of high levels of protection as well as performance whilst lowering the complexity and overall costs associated with management and deployment of a large number of point solutions. The company can either design its own Network Intrusion Prevention System or purchase a customized one from the market manufacturers such as the International Business Machines (IBM). The use of this system prevention system from intrusion provides the company with unmatched performance levels without compromising the depth as well as breadth of security. In addition, this system will also protect the critical assets of the business from malicious threats, as well as, unauthorized visitors, such as on the systems networks, applications, endpoints, and servers. Consequently, this will also reduce both the complexity as well as the costs through consolidation of point solutions and the integration of other tools of security, in addition to providing the company with superior advantages over protection from threats. A secure network security in place will enable the ABC Health Care to experience numerous benefits in business especially considering the stability of its network system and security. For instance, the company system will not suffer any disruptions because of the network security it already has, and this will enhance productivity among its employees, as they shall work throughout their business hours. In addition, this network security also assists the company to meet its mandatory regulatory compliance, such as with the HIPAA and the SOX. This is because network security enables the company to protect its customers’ data from unauthorized access, as well as, reduce legal action against it owing to data theft. Ultimately, having a reliable network security helps in protecting the business’ reputation, which is among the most important assets of the business? Question Two: The designing of a new technical system for the company should therefore set several system monitoring, logging, auditing, and procedures in order to comply with the legal regulations in order to have a sound Information Management System. This will also improve its appeal to the market as well as ensure that it creates loyalty among consumers through the development of their confidence and trust in the products and services offered by the company, and more especially to its brand name and image. As such, the development of these measures requires proper procedures to ensure maximum security when logging into the accounts of the company. In addition, the pages these users, both trusted as well as Untrusted will view will be limited strictly to their area of specialization and nothing more. In order to watch more content, the users will require superior authority either from the organization or system managers. Consequently, this will also lead to fewer cases of system malpractice and interference from outside sources, as well As comply with the legal regulations of healthcare operations, such as the SOX and the HIPAA. This will require proper authentication systems, which ensure the proper identification of all persons who try to access the information system of the health care institution. The use of the Network Intrusion Prevention System, either purchased as a customized design or designed by its own system developers, will be a paramount step towards realization of its goals to streamline its network system and protect its information from unauthorized personnel. This will also facilitate proper implementation of the procedures of monitoring the system, logging and auditing procedures, as well as, ensuring compliance with all the necessary legal regulations, like those from HIPAA and SOX. Question Three: The system will identify and authenticate all users who attempt to access the information resources of ABC Health Care through a password demand protocol. Every user who attempts to log into the information systems of the company will have to enter a valid username and password, previously generated by the company at the time of registration. Every new user will have to register to the site in order to have access to the information system and through this registration, get a password and a user name that they shall use to log in every time they visit the website. The system will thus identify and authenticate all users using this system. This would be feasible through the incorporation of authenticating procedures before one gains admission through to a given page or site within the company system. As such, this would require username and password, which one gets after registration into the information systems of the company. In addition to using passwords and usernames before gaining access to the information system of the health care organization, the company can also set different key to protect certain information that is very confidential and relevant to the market. These keys or codes are the ones an individual requiring access to a particular site within the information systems of the company will have to enter before gaining access. These keys come in different varieties such as, the key to patients’ databases, the key to financial transactions of the health care institution, as well as to taxation, especially in for-profit health care organizations such as the ABC Health Care Limited. To ensure limited access to this vital information, these keys will only circulate amongst authorized personnel of the organization alone, such as the mangers in charge of the involved departments, as well as, the manager in charge of information systems in the company. As such, it will be very simple for them to monitor access to these sites, especially in the case whereby the persons accessing these sites at the given time of breach are not part of the authorized team. The company can go further and limit access to certain sites within its database through usage of particular computers or systems within the premises of the organization. For example, creating a thick firewall that prevents any external access to the systems of the company unless the intruder is within several feet of the organizations’ main server, which in most cases is at the core of the company’s premises. This makes it impossible for outsiders to breach these systems, and thus even simplifies the possibility of capturing them, as they have to be within the premise to perfume such tasks. In order to consolidate further these network systems, the company can also put up stiff physical security that restricts admission to the server room, only to permit selected personnel to enter the room, and keep the access codes with senior management concerned with the department. Question Four: The information systems of ABC Health Care shall have back up storage system whereby it will store all the information entered into the system and save it up for future use. This saved information is especially useful in situations whereby the system crashes and requires back-up procedures to resuscitate it back to normalcy. As such, the system shall use this procedure if it crashes from an attack, a failure or any kind of accidents. Consequently, the ABC Health Care shall initiate and operate a foolproof backup system that shall guarantee continuity of services even if the main system goes down or fails to operate due to a number of anomalies. Question Five: The system will address User Account Management as well as related security improvements through a constant check-up and analysis in the system accounts. This entails revisiting the records put in by users at the time of their registration and confirming its validity from time to time by asking users to confirm or review their status of registration. Related security improvements may come through incorporation of other verification systems of the users’ information such as their email addresses, their phone numbers and in some cases, their security numbers or Personal Identification Numbers (PIN). References ABC Health Care Incorporation. Retrieved from http://www.abchc.com/ Read More