discuss various enforcement problems with IT security policies.The first two case studies illustrate the lack of enforcement which allowed data breaches to occur.The third case study showed how a policy changed the culture and prevented a more serious breach.
American Family Care is notifying patients that their personal information – including Social Security numbers – may have been stored on two unencrypted, password protected laptops that were stolen from an employee’s vehicle in July.
How many victims?
What type of personal information? Information related to work-related injuries, physicals, immunizations, or drug screens. On Aug. 15, American Family Care discovered that the laptops may have contained patient names, addresses, dates of birth, phone numbers, medical record numbers, Social Security numbers, medical information, insurance information, driver’s license numbers and dates of service.
1) What American Family Care weaknesses might have caused the breach? Please list at least 3 possible weaknesses.
2) What should the response be for American Family Care? (lessons learned, how can they prevent future breaches) Please list at least 3 possible activities.
