IT_412_5_2_Final_Project_Milestone_Two_Draft_of_Risk_Analysis_Paper__Sections_4_and_5.docx

IT_412_5_2_Final_Project_Milestone_Two_Draft_of_Risk_Analysis_Paper__Sections_4_and_5.docx    IT 412  5-2 Final Project  Milestone Two  Draft of Analysis Paper  Sections 4 and 5  Southern New Hampshire University  44162  Draft of Risk Analysis Paper  4) Cyberlaw noncompliance   ABC Healthcare is violation of the HIPAA rules by leaving patient personal information unattended, Health Insurance Portability and Accountability Act of 1996 (HIPAA). was established to provide privacy standards to protect patients™ medical records and other health information provided to doctors, hospitals, and other health care providers. The company can be fined and ordered to shutdown until the violation are corrected in compliance with the laws, they are governed by  ABC Healthcare is in direct violation of Guide for Cybersecurity Event Recovery NIST SP 800-184. The regulation provides the roadmap for the execution of recovery processes and procedures to ensure timely restoration of systems or assets affected by cybersecurity incidents. It is requirement for a company storing data to have in place a plan to back up plan to save information either on a hard drive or cloud structure.  .   5) Acceptable use-of-technology policies research  ABC Healthcare does not have an acceptable use policy in place. The company needs a policy to govern employees over the use of company provided equipment. Employees of ABC Healthcare must follow the rules as they outlined in the AUP. The rule will restrict the use and set guidelines of how to remain protected from unwanted access of patient data. ABC Hea