The three areas that are the biggest threat to the hospital’s IT assets and information are the issue of physical security, inside sabotage, and most importantly a break down in online security. Information is such a valuable and precious resource especially for a hospital and a patients privacy (HIPAA). The first issue of physical security is a definite concern. Having an individual physically enter the hospital and steal information from the hospital directly; paper files, employee information, patient information, and other important information has to be locked in a secured room with limited access. Having good security personnel that are physical able to protect the hospital’s information and offices is an absolute must. The second issue is inside sabotage; this is when a trusted employee betrays the hospital by leaking or giving information to another source; sources vary from other hospitals, insurance companies, or possible identity thieves. To stop this issue a comprehensive background employment check and ethics classes should reduce the risk of employees stealing information. The third issue is a break down of online security; this can basically occur when a hacker try infiltrating an information system of the hospital. Hackers are individuals who use the internet and computers to virtually break into a system to either steal or cause anarchy; some hackers have also been known to steal information from facilities to steal information from high level secured locations for enjoyment. To prevent hackers IT employees should be aware of all current software and hardware upgrades that can help protect the information of the hospital. Another way to protect information from hackers would be to update software and hardware of the hospital; in order to have optimal protection all computers and software should be compatible and be able to defend against online attacks.