Assignment Task
Unit learning outcomes
1. Critically examine, assess, and investigate the policies, standards, methodologies and procedures, around information governance and their impact on security frameworks in modern and dynamic information systems with clear references to the value of information and organisational assets
2. Assess, classify, evaluate and review current legal and regulatory requirements, record management and auditing processes and their influence upon self-preserved, dynamic and versatile information governance programmes and frameworks
Scenario
Luton and High Town Hospital Trust have employed you as an information governance consultant to help them develop their information governance and security procedures. They currently have 20 hospitals and five walk-in clinics as well as 15 GP practices.
The Trust has an IT team of twenty people including two information security specialists, ten desktop specialists, four network specialists, one network administrator, a Chief Information Security Officer (CISO) and a Chief Information Officer (CIO).
Each of their facilities is connected via an Ethernet Local Area Network (LAN) woth a variety of PCs, printers, laptop machines and a main server. Each local network is connected to a Wide Area Network for the entire Trust meaning that information can be shared across the facilities. In addition, each facility has an external connection to the Internet, and each has a staff (protected/private) Wireless network as well as an open wireless network for members of the general public.
Due to the sensitive nature of patient records, as well as the main application server there are also a local file server, email server and database server, all of which are able to serve all sites on the Wide Area Network. These are physically located on a central site and are managed by the in-house IT team.
Staffing (general)
Each hospital has:
A general manager
Doctors, nurses and lab specialists
Cleaning team
Each walk-in centre has:
Doctors
Two nurses
Reception manager and a team of four receptionists
Each GP practice has:
A Practice manager
Team of doctors who work on-site, but who also perform home visits and can manage and access patient records via a tablet device
Practice nurse
In addition to these staff, the Trust uses an external security firm to provide a team of:
6 security guards for each hospital
3 security guards of each walk-in centre1 security guard for each GP practice
Over the last twelve months there have been a number of security incidents:
Three phishing attacks in which there were two successful attempts to access staff details within the main Luton hospital
1 unsuccessful ransomware attack
Five social engineering attacks on reception staff, all of which were successful and led to patient files being compromised. As as result a fine of £750,000 was issues by the Information Commissioner’s Office
What do I need to do to pass? (Threshold Expectations from UIF)
Implement, evaluate and analyse an asset classification scheme for a given scenario.
Justify information governance requirements and limitations in a given organisational context
Undertake analysis of organisational norms, trends, and guidelines to be considered when implementing, testing, and reviewing an information governance framework
How do I produce high quality work that merits a good grade?
You need to ensure that for each of the elements:
An outline information governance policy for the Luton and High Town Hospital Trust.
An information security incident response and disaster recovery plan for the Luton and High Town Hospital Trust
A risk management plan for the Luton and High Town Hospital Trust identifying the main risks associated with the given scenario and outlining mitigations for each
An information security roadmap for the Luton and Nigh Town Hospital Trust identifying the technical measures that need to be put in place in order to improve the security and governance for their sites
That you provide a fully justified and critiqued solution that relates directly to the scenario.
How does this assignment relate to what we are doing in scheduled sessions?
Each week we will explore relevant topics relating to information governance, risk management and disaster recovery that relates directly to the knowledge underpinning the assignment.
Welcome to our Online Essay Writing Agency. Securing higher grades costing your pocket? Order your assignment online at the lowest price now! Our online essay writers are able to provide high-quality assignment help within your deadline. With our homework writing company, you can order essays, term papers, research papers, capstone projects, movie review, presentation, annotated bibliography, reaction paper, research proposal, discussion, or another assignment without having to worry about its originality – we offer 100% original content written completely from scratch
A-Plus Writing Help For University Students
Get expert assistance in any academic field. All courses and programs covered.
Get Help Now!We write papers within your selected deadline. Just share the instructions
