Describe security and risks associated with a health care IT

Respond to the following in a minimum of 175 words: 

• Describe security and risks associated with a health care IT application.  
• What are security standards and risks of not upholding the standards? 

Also reply to the responses below in 175 minimum as well.

Reply#1

 Ciara Robinson

Hello Class, 

The three major risk categories for MHealth apps are poor design, device vulnerabilities and user habits. When it comes to an app's design, developers may not take the appropriate steps to ensure data security at all levels, including the device, the network and the data center. Cyber attacks: In the past few years, healthcare organizations have been increasingly under threat from external cyberattacks. Ransomware gangs are especially targeting healthcare groups, as well as criminals and disgruntled employees who take advantage of vulnerabilities in healthcare organizations' digital networks. This is because it depends on the specific web application and its unique vulnerabilities. However, the most common application security threats according to the OWASP Top 10 are broken access control, cryptographic failures, and injection (including SQL injection and cross-site scripting. Here are some common information security threats and attacks: Malware: Malicious software designed to infiltrate, damage, or disrupt systems. Malware includes viruses, worms, Trojans, ransomware, and spyware. It can steal sensitive information, cause system downtime, or provide unauthorized access to attackers. 

Ignoring security rules makes it easy for hackers to attack systems and data. By being non-compliant, companies leave themselves wide open to data breaches, hacks, and cyber attacks. Security standards also allows the sharing of knowledge and best practices by helping to ensure common understanding of conditions, terms, and definitions, which can prevent costly errors. These published materials consist of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies. Some common consequences for noncompliance: Civil lawsuits and monetary damages. Fines and penalties imposed by government agencies. Criminal liability in cases of intentional or reckless violations.

Reply#2

 Kimberlee Martin

Good afternoon class,

Healthcare data security focuses on protecting the data, computers, and networks that healthcare providers and companies use. Data security in healthcare, in many ways revolves around HIPPA. There are couple of the most common risks factors associated with healthcare.

1.Use of outdated/legacy systems-outdated systems often have security vulnerabilities that can't be patched

2. Email scams with malware-often have many employees, attackers send malware through email.

3. Internal employees, contractors, vendors, etc.- healthcare organizations often have a very diverse mix of people that work for them.

4.Unsecure of poor wireless network may healthcare organizations, such as hospitals and clinics may provide wireless access to patients and visitors.

5.Lack of strong password many organizations, employees may use weak passwords, such as these that they use for other accounts.

There are a few risks of not upholding security standards.

• Data Breaches- Failure to adhere to security standards increases the risk of data breaches, leading to the unauthorized access, theft, or disclosure of sensitive information
• Lawful consequences and the permissible indication of nonconformity cannot be taken lightly. Prohibited law can develop into dispute reported by patients or workers afflicted by belligerent 
• Reputation Damage security incidents resulting from non-compliance can damage an organization reputation and erode customer trust and confidence.