Facility Network Security: Assessment and Recommendations

You are the chief information technology officer at a small outpatient health care facility in Riyadh. The medical facility employs five specialist physicians, ten certified nurses, five administrative assistants, and two technicians. There are 25 clinical rooms, each equipped with a computer. In addition, five computers are used by the administrative assistants for patient appointments and records. All of these computers are connected using a local area network. Physicians are supplied with portable devices that they can use to write e-prescriptions. These devices are connected wirelessly to the rest of the network.

As the chief information technology officer, you are charged with the task of evaluating the security status of the facility network and developing a report to recommend the directions that should be followed in the near future.

The report should include:

• Existing and potential vulnerabilities and threats
• Suggestions and discussions of methods or tools that can be used to overcome the existing and potential security threats
• Discussion of encryption techniques that can be used for the wireless network and the selection and justification of a proper technique for this facility
• Discussion of the prevention of cyber-attacks and the proper maintenance needed to achieve this goal.