course name: cyber security

Your customer is a small community clinic with a small budget. The clinic director is likely to be aware of the sensitivity of the information in the records and to know that inappropriate release of information can result in embarrassment for families using the clinic and physical harm. She is not aware of the risks of the technologies in the system she wants. You, as the computer professional, have specialized knowledge in this area. It is as much your obligation to warn the director of the risks. Suppose you warn the director about unauthorized access to sensitive information by hackers and the potential for interception of records during transmission. You suggest measures to protect client privacy, encryption for transmission of records, security measures to reduce the threat of hackers who might steal Page 3 of 5 data. You tell the director that carrying client records on laptops or phones has serious risks, citing examples of loss and theft of devices containing large amounts of sensitive personal data. You advise that the system encrypt records on laptops, and you suggest that the director buy laptops with extra security features (such as thumbprint readers, so that only authorized employees can access the data, or remote tracking or erasing features). The features you recommend will make the system more expensive. Suppose the director says the clinic cannot afford all the security features. She wants you to develop the system without most of them. Formulate your plan of actions, in this case, and justify them according to the ethical frameworks