Case study

Imagine you just appointed as the Chief security officer of a health care center called brilliant health center. The health center is mainly providing sophisticated diagnosis services such as doing Blood test$/$ Blood culture, MRI, X$-$ray, $($general and specialized x$-$ray like thoracic and spine x$-$ray$),$ Ultrasound so on$.$ This center has contract with several health care center for providing diagnosis services. Last year there was case of licking MRI report of a critical patient. Patient has sue against your company due to breach the privacy rule. The case is still going on$.$ Health center management is very concern about the security of the patient$$s health information both clinical, and non$-$clinical information. Management recruited you to set up an effective information security system so that the incident will not happen again.

What you need to do

As a new Chief security officer you need to develop an information security plan for the Brilliant health center. Management gave you $14$ days from $28$ March $2024$ to outline the plan.

Prepare a detail information security plan assessing the need for human resources, training requirement, financial requirement, infrastructure development, update or installation of new security system and administrative arrangement.