For this assignment, you will take on the role of a compliance consultant who has been hired to create a plan that will assist an institution in meeting its professional or governmental compliance standards.
This compliance plan will be based on the scenario you chose and researched in Week 2 download. Include the following information in your compliance plan.
Carefully review the standards for the option you chose. Identify the specific compliance requirements within the standards, and briefly discuss the business reasons for implementing the standards chosen.
Explain the type of network design that would best meet the standards identified. Revise your network diagram from Week 2, using Visio within your lab environment. This diagram must be copied into your plan document as an image. (The Visio diagram may be included in your assignment by means of a screenshot pasted into your document prior to submission. Assistance with capturing a screenshot of your Visio may be found at Take-a-screenshot.org (Links to an external site.).) Describe how you would recommend segmenting the network in order to best meet compliance standards, providing a rationale for your suggestions and supporting your statements with your research.
Examine the firewall types necessary to ensure the security of the individual network segments within your institutional setting. Create a plan for the implementation of firewalls within each partition of the network.
Analyze the potential uses of intrusion detection systems (IDSs) within each network partition and recommend the placement of IDS within the partitions based on the standards for your institution. Evaluate the controls needed for maintaining your recommended IDS infrastructure and create a brief plan that outlines your recommendations for this maintenance. Provide a rationale for your suggestions supporting your statements with your research.
Classify the types of data included in your chosen scenario and evaluate the IT governance methodologies that apply to the classified data types. Explain which IT governance methodology would need to be implemented within each partition of the network in order to meet compliance standards.
The Compliance Plan
Must be 10 to 15 double-spaced pages in length (not including title and references pages) and formatted according to APA style.
Must include a separate title page with the following:
Title of paper
Student’s name
Course name and number
Instructor’s name
Date submitted
Must use at least five scholarly and/or credible professional sources in addition to the course text.
Must document all sources in APA style as outlined in the Writing Center.
Must include a separate references page that is formatted according to APA style.
Resources
HIPAA Journal. (December 28, 2017). What is considered PHI under HIPAA? Retrieved from https://www.hipaajournal.com/considered-phi-hipaa/
This blog post discusses what PHI is under the HIPAA act, and provides examples of the identifiers that make health information PHI, and it may assist you.
Joint Task Force. (2018, October). Risk management framework for information systems and organizations. Retrieved from
https://csrc.nist.gov/CSRC/media/Publications/sp/800-37/rev-2/draft/documents/sp800-37r2-draft-fpd.pdf
Review Chapter 2
This resource will provide additional information for evaluating data management risks in organizations and may help you with your Governance Frameworks and Data Breaches.
Price, N. (February 6, 2019). Hospital board governance best practices.
Retrieved from https://www.boardeffect.com/blog/hospital-board-governance-best-practices/
This blog post discusses the general hospital board governance and best practices under the HIPAA act.
Anicas, M. (August 20, 2015). What is a firewall and how does it work? Retrieved from
https://www.digitalocean.com/community/tutorials/what-is-a-firewall-and-how-does-it-work
This article explains what a firewall is and how it provides network security.
Bauer, M. (2001). Designing and using DMZ to protect Internet servers. Linux Journal, 83. Retrieved
from http://www.linuxjournal.com/article/4415
In this short article, Mick Bauer explains how to care for services that come into contact with untrusted networks.
Forcepoint. (n.d.). What is a firewall? Firewalls are defined, explained, and explored. Retrieved from
https://www.forcepoint.com/cyber-edu/firewall
This article discusses what a firewall is, and provides examples of different types of firewalls.
Last Completed Projects
| topic title | academic level | Writer | delivered |
|---|