Risk Analysis: Instructions and Worksheet Instructions ABC is a healthcare organization located in the Midwest who just hired their first security officer. The organization does not have any security controls in place to include policies, reasonable safeguards, and security measures. The first thing the new security officer does is to identify a list of potential threats to the organization, which are listed below. Reasonably Anticipated Threats (1) Virus, worm, or other types of malicious code (2) Unintentional workforce behaviorCareless acts or errors, accidental disclosures or destruction of protected health information (PHI), or computer misuse (3) Intentional workforce behaviorUnauthorized access, disclosures or destruction of PHI, software license violations, or computer misuse (4) TamperingProgramming a backdoor or trap door, installing rogue devices or sniffers, or denial of service attacks (5) Programming errors, software failure, or bugs (6) TheftProperty (hardware/software/data) and identity theft (7) Hardware or mechanical failure (8) Power failure, fluctuation, or electrical disturbance After evaluating the threats, the new security officer identifies a list of controls, listed below, that could be put in place to mitigate the threat(s). Controls a. Policies, procedures, plans, standards, and so on. b. Training and awareness c. Authentication and access controls d. Anti-virus software e. Uninterruptible