[Solved] outline a contingency plan

Assignment Prompt & Instructions

outline a contingency plan

– 2 years ago

**files (1)**

– ## Module9.docx

**## Module9.docx**

**Module 6: A Case for Back-up & Recovery**

For this assignment, you will need to review the Case Study presented and outline a contingency plan that addresses possible security threats and breaches, provides a strategy to minimize the disruption to hospital operations while protecting patient information.

Expand AllPanels Collapse AllPanels

[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787177?module_item_id=15517099)

DeVry Hospital, a 200-bed acute-care facility, has been encountering security incidents involving a ransomware attack, in addition to a major breach of patient records. The Chief Privacy & Security Officer is requesting a contingency plan that will minimize the potential for security threats and provide for continuity of the necessary hospital operations to care for patients.

[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787177?module_item_id=15517099)

As a member of the security team, you have been asked to outline a contingency plan to counteract the identified ransomware attacks, data breaches and prepare the hospital for natural disasters and potential system failures. You plan should include clear procedures for mitigating the security breaches.

Steps you will complete the following as part of your proposed contingency plan:

1. Provide a risk assessment that identifies and prioritizes potential security threats.

2. Propose possible strategies to prevent security incidents. This should involve system updates, possible employee training that may be needed and security protocols.

3. Outline a procedure for regular data backups with a clear data recovery plan in case of a system crash.

4. Recommend a process for completing a post-incident review to ensure a thorough investigation is completed to identify any potential gaps in the existing contingency plan.

Your deliverable method can be either in the form of a half-page to full page proposal or PowerPoint slides that outline each of the strategies you are proposing with an action plan for implementing them. For PowerPoint slides, the slides should outline your key points/recommendations and utilize the Notes section under your slides to provide complete sentences for your report as if you were presenting to a board for approval to implement.

Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.

**This assignment utilizes TurnItIn, which reviews citations, plagiarism, and artificial intelligence (AI) usage.**

**Action**

Select the Start Assignment button to begin.

Once you have uploaded your file, select Submit Assignment.

**Rubric**

**M6 A Case for Back-up & Recovery**

| | | | |
| — | — | — | — |
| M6 A Case for Back-up & Recovery |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Paper Option<br>-Uses standard double-spacing without extra spaces between bullets or paragraphs<br>-Minimum length 1/2 page, maximum length 1 page<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable<br>PowerPoint Option<br>-No more than 5 bullets per slide<br>-Keep slides uncluttered so easy to follow<br>-Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes)<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list on a reference slide IF applicable | | | | | |
| — | — | — | — |
| **5 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all of PowerPoint presentation parameters -Minimum of 5 content slides, Maximum of 8 content slides -Includes a title slide -Includes a reference slide if needed -Presentation developed from perspective as if being presented to the board -No more than 5 bullets per slide -Keep slides uncluttered so easy to follow -Includes use of graphical representations to give visual emphasis & credibility to presentation -Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes) -Free of grammatical & spelling errors -Uses APA in-text citations and reference list on a reference slide IF applicable | **3 pts**<br>**In Progress**<br>Student submission clearly encompasses all paper or PowerPoint parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable | **1 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper or PowerPoint parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 5 pts |
| This criterion is linked to a Learning OutcomeRisk Assessment<br>Risk Assessment<br>-Provides risk assessment that identifies potential security threats<br>-Includes prioritization of potential security threats | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission provides clear identification of potential security threats through risk assessment and includes prioritization of potential security threats | **5 pts**<br>**In Progress**<br>Student submission mostly provides identification of potential security threats through risk assessment and inclusion of prioritization of potential security threats – may be missing pertinent information | **2 pts**<br>**Little Evidence**<br>Student submission is off topic for control mechanisms or does not identify potential security threats through risk assessment and inclusion of prioritization of potential security threats | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet the expectations for identifying potential security threats through risk assessment and inclusion of prioritization of potential security threats | | 7 pts |
| This criterion is linked to a Learning OutcomeSecurity Incident Prevention<br>Security Incident Prevention<br>Provides strategies to prevent potential security incidents that includes consideration of<br>-system updates<br>-possible employee training<br>-needed security protocols<br>CO6 | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission on Security Incident Prevention clearly identifies strategies to prevent potential security incidents that includes consideration of -system updates -possible employee training -needed security protocols | **5 pts**<br>**In Progress**<br>Student submission on Security Incidence Prevention mostly identifies strategies to prevent potential security incidents that includes consideration of -system updates -possible employee training -needed security protocols | **2 pts**<br>**Little Evidence**<br>Student submission on Security Incidence Prevention does not consider all of these factors -system updates -possible employee training -needed security protocols | **0 pts**<br>**No Evidence**<br>Student submission on Security Incidence Prevention clearly does not meet expectations or nothing submitted | | 7 pts |
| This criterion is linked to a Learning OutcomeTraining Programs<br>Training Programs<br>-Findings of review on training program deficiencies encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance<br>CO6 | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission on Training Programs clearly addresses findings of review on training program deficiencies and encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance | **5 pts**<br>**In Progress**<br>Student submission on Training Programs mostly addresses findings of review on training program deficiencies and encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance but may be lacking details | **2 pts**<br>**Little Evidence**<br>Student submission on Training Programs is off topic or does not clearly address findings of a review covering training program deficiencies relating to use/protocols on electronic health record and/or HIPAA compliance | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet expectations on addressing training program review findings or nothing submitted | | 7 pts |
| This criterion is linked to a Learning OutcomePost Incident Review Process<br>Post Incident Review Process<br>Proposes a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan<br>CO6 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission of Post Incident Review clearly proposes a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **6 pts**<br>**In Progress**<br>Student submission of Post Incident Review mostly identifies a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **3 pts**<br>**Little Evidence**<br>Student submission of Post Incident Review is off topic or does not clearly give a proposed process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide proposed process to follow post-incident review | | 9 pts |
| Total Points: 35 |

**## Module9.docx**

**Module 6: A Case for Back-up & Recovery**

For this assignment, you will need to review the Case Study presented and outline a contingency plan that addresses possible security threats and breaches, provides a strategy to minimize the disruption to hospital operations while protecting patient information.

Expand AllPanels Collapse AllPanels

[**Case Study**](https://devryu.instructure.com/courses/118470/assignments/3787177?module_item_id=15517099)

DeVry Hospital, a 200-bed acute-care facility, has been encountering security incidents involving a ransomware attack, in addition to a major breach of patient records. The Chief Privacy & Security Officer is requesting a contingency plan that will minimize the potential for security threats and provide for continuity of the necessary hospital operations to care for patients.

[**Action Plan**](https://devryu.instructure.com/courses/118470/assignments/3787177?module_item_id=15517099)

As a member of the security team, you have been asked to outline a contingency plan to counteract the identified ransomware attacks, data breaches and prepare the hospital for natural disasters and potential system failures. You plan should include clear procedures for mitigating the security breaches.

Steps you will complete the following as part of your proposed contingency plan:

1. Provide a risk assessment that identifies and prioritizes potential security threats.

2. Propose possible strategies to prevent security incidents. This should involve system updates, possible employee training that may be needed and security protocols.

3. Outline a procedure for regular data backups with a clear data recovery plan in case of a system crash.

4. Recommend a process for completing a post-incident review to ensure a thorough investigation is completed to identify any potential gaps in the existing contingency plan.

Your deliverable method can be either in the form of a half-page to full page proposal or PowerPoint slides that outline each of the strategies you are proposing with an action plan for implementing them. For PowerPoint slides, the slides should outline your key points/recommendations and utilize the Notes section under your slides to provide complete sentences for your report as if you were presenting to a board for approval to implement.

Note: If you utilize your textbook or any references to support your recommendations, provide a reference list.

**This assignment utilizes TurnItIn, which reviews citations, plagiarism, and artificial intelligence (AI) usage.**

**Action**

Select the Start Assignment button to begin.

Once you have uploaded your file, select Submit Assignment.

**Rubric**

**M6 A Case for Back-up & Recovery**

| | | | |
| — | — | — | — |
| M6 A Case for Back-up & Recovery |
| **Criteria** | **Ratings** | **Pts** |
| This criterion is linked to a Learning OutcomeParameters<br>Parameters<br>Paper Option<br>-Uses standard double-spacing without extra spaces between bullets or paragraphs<br>-Minimum length 1/2 page, maximum length 1 page<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list IF applicable<br>PowerPoint Option<br>-No more than 5 bullets per slide<br>-Keep slides uncluttered so easy to follow<br>-Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes)<br>-Free of grammatical & spelling errors<br>-Uses APA in-text citations and reference list on a reference slide IF applicable | | | | | |
| — | — | — | — |
| **5 pts**<br>**Meets or Exceeds**<br>Student submission clearly encompasses all of PowerPoint presentation parameters -Minimum of 5 content slides, Maximum of 8 content slides -Includes a title slide -Includes a reference slide if needed -Presentation developed from perspective as if being presented to the board -No more than 5 bullets per slide -Keep slides uncluttered so easy to follow -Includes use of graphical representations to give visual emphasis & credibility to presentation -Notes Section of slides should contain a detailed outline of what slide is presenting (speaker notes) -Free of grammatical & spelling errors -Uses APA in-text citations and reference list on a reference slide IF applicable | **3 pts**<br>**In Progress**<br>Student submission clearly encompasses all paper or PowerPoint parameters -Free of grammatical & spelling errors -Uses APA in-text citations and reference list IF applicable | **1 pts**<br>**Little Evidence**<br>Student submission does not clearly meet the paper or PowerPoint parameters -Has 4 or more grammatical & spelling errors -does not use APA in-text citations and reference list IF applicable | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet the required Parameters | | 5 pts |
| This criterion is linked to a Learning OutcomeRisk Assessment<br>Risk Assessment<br>-Provides risk assessment that identifies potential security threats<br>-Includes prioritization of potential security threats | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission provides clear identification of potential security threats through risk assessment and includes prioritization of potential security threats | **5 pts**<br>**In Progress**<br>Student submission mostly provides identification of potential security threats through risk assessment and inclusion of prioritization of potential security threats – may be missing pertinent information | **2 pts**<br>**Little Evidence**<br>Student submission is off topic for control mechanisms or does not identify potential security threats through risk assessment and inclusion of prioritization of potential security threats | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet the expectations for identifying potential security threats through risk assessment and inclusion of prioritization of potential security threats | | 7 pts |
| This criterion is linked to a Learning OutcomeSecurity Incident Prevention<br>Security Incident Prevention<br>Provides strategies to prevent potential security incidents that includes consideration of<br>-system updates<br>-possible employee training<br>-needed security protocols<br>CO6 | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission on Security Incident Prevention clearly identifies strategies to prevent potential security incidents that includes consideration of -system updates -possible employee training -needed security protocols | **5 pts**<br>**In Progress**<br>Student submission on Security Incidence Prevention mostly identifies strategies to prevent potential security incidents that includes consideration of -system updates -possible employee training -needed security protocols | **2 pts**<br>**Little Evidence**<br>Student submission on Security Incidence Prevention does not consider all of these factors -system updates -possible employee training -needed security protocols | **0 pts**<br>**No Evidence**<br>Student submission on Security Incidence Prevention clearly does not meet expectations or nothing submitted | | 7 pts |
| This criterion is linked to a Learning OutcomeTraining Programs<br>Training Programs<br>-Findings of review on training program deficiencies encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance<br>CO6 | | | | | |
| — | — | — | — |
| **7 pts**<br>**Meets or Exceeds**<br>Student submission on Training Programs clearly addresses findings of review on training program deficiencies and encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance | **5 pts**<br>**In Progress**<br>Student submission on Training Programs mostly addresses findings of review on training program deficiencies and encompasses assessment on proper use/protocols on electronic health record and HIPAA compliance but may be lacking details | **2 pts**<br>**Little Evidence**<br>Student submission on Training Programs is off topic or does not clearly address findings of a review covering training program deficiencies relating to use/protocols on electronic health record and/or HIPAA compliance | **0 pts**<br>**No Evidence**<br>Student submission clearly does not meet expectations on addressing training program review findings or nothing submitted | | 7 pts |
| This criterion is linked to a Learning OutcomePost Incident Review Process<br>Post Incident Review Process<br>Proposes a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan<br>CO6 | | | | | |
| — | — | — | — |
| **9 pts**<br>**Meets or Exceeds**<br>Student submission of Post Incident Review clearly proposes a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **6 pts**<br>**In Progress**<br>Student submission of Post Incident Review mostly identifies a process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **3 pts**<br>**Little Evidence**<br>Student submission of Post Incident Review is off topic or does not clearly give a proposed process to follow post-incident review that ensures an investigation that identifies any gaps in current contingency plan | **0 pts**<br>**No Evidence**<br>Student submission does not clearly meet expectations to provide proposed process to follow post-incident review | | 9 pts |
| Total Points: 35 |