Mystar Hospice Risk Mgmt Plan Essay Example

server equipment.

The building has vulnerabilities as several key doors are unlocked or can be forced open. This includes important doors within the interior office area, the utility room door with no lock, the modem pool room that is usually open and unlocked, and the system administrators office that is also usually unlocked and open. This poses a risk as valuable assets of Mystery Hospice Care can be stolen and/or destroyed with minimal effort from a determined attacker, thief, or disgruntled employee. It is recommended to replace current doors with stronger fire doors, replace existing door hardware with high security locks, and weld exterior hinge pins in place. To manage risks, a risk management plan should be periodically updated and expanded throughout the project life cycle or life of the company in order to identify and evaluate any potential risks. Stronghold Securities can assist in identifying risks and outlining mitigation actions.

The absence of an entryway access control system in a security perimeter can lead to vulnerabilities where unauthorized personnel can gain access without restriction. An effective system would require authorized personnel to enter a correct PIN number or use a unique access card to gain entry, with advanced systems providing log information. Without such a system, there are risks of unauthorized access and no records of personnel entries, making it impossible to disable access for specific individuals. To address this, available and suitable entryway access systems must be evaluated, appropriate procedures for assigning and removing access developed, and an appropriate system installed with assigned access rights. A documented Policies and Procedures for Mystery Hospice Care must also be in place, agreed upon by all

current and future employees in writing. Any policy violations will result in disciplinary actions. Current management personnel will conduct meetings to identify, analyze, plan, track, control, communicate, and address threats to the network infrastructure.The Server Controls Access Controls utilize user rights and authentications for network access. Access to Server Access is granted or concealed based on the logged-in user. Drive Encryption secures files even if drives are stolen or improperly discarded. If an intruder gains physical server access, Physical Security may be compromised, allowing machines to be removed. Anti-Virus Software with updated virus signatures prevents data corruption from new viruses. To prevent unnecessary software from existing on servers, it should only be used by company personnel for business purposes or deleted/disabled.