Risk Assessment Proposal

We are creating a Risk Management assessment for a local doctor’s office. This office not only handles patient care but patient confidentiality with IT services that complies with HIPAA. This threat assessment is going to be important to know if our business plan is viable. We are going to assessing the possible and probable risk, vulnerabilities, and threats associated with the doctor’s office. This is going to require us to understand how risk management works by using quantitate and/or qualitative valuing. We will need to use management techniques of understanding, controlling, and planning for and against threats. We will also use a few techniques to manage vulnerabilities like people, technology and environmental events. We will also be determining how to reduce the probability of risk through mitigation. We will be determining how we can reduce an impact with contingencies. We will attempt to determine the amount of reduction using mitigation and contingency plans. Finally we will be determining our exposure left given what we cannot reduce. This doctor’s office may include anything from breach of patient’s medical records, lack of training with staff as it pertains to patient confidentiality, and operating systems. Also evaluated in this process will be environmental and device discovery with patients obstructing the network. This process will be conducted as a means to analyze current base-lines as to the operation of the office and to make the process less costly and more efficient at reducing loss and risk. Finally, we will create a plan of action to control threats, vulnerabilities, and risks. Considering we are conducting a risk assessment for a doctors’ office, this could include anything from implementing and or upgrading life safety systems and devices to updating network devices, software, ids/ips, anti-virus,