Case Study : Physical Access Social Engineering In your role of ISO at Anywhere USA University Teaching Hospital , you commissioned an independent security consultancy to test the hospital 's physical security controls using social engineering impersonation techniques . At the end of the first day of testing , the tester submitted a preliminary report . Physical Access to Facilities Dressed in blue scrubs , wearing a stethoscope , and carrying a clipboard , the tester was able to access the lab , the operating room , and the maternity ward . In one case , another staff member buzzed him in . In the two other cases , the tester walked in with other people . Physical Access to the Network Dressed in a suit , the tester was able to walk into a conference room and plug his laptop into a live data jack . Once connected , he was able to access the hospital 's network . Physical Access to a Computer Wearing a polo shirt with a company name , the tester was able to sit down at an unoccupied office cubicle and remove a hard disk from a workstation . When questioned , he answered that he had been hired by John Smith , IT Manager to repair the computer . Physical Access to Patient Files Wearing a lab coat , the tester was able to walk up to a printer in the nursing station and remove recently printed documents . Based on these findings , you request that the consultancy suspend the testing . Your immediate response is to call a meeting to review the preliminary report .

1.Determine who should be invited to the meeting?

2.Compose a meeting invitation explaining the objective?

3.write an agenda for the meeting?

4.Identify what you see as the most immediate issues to be remediated?