Hotspot Question A healthcare organization must develop an action plan based on the findings from a risk assessment. The action plan must consist of a recommended list of security controls. INSTRUCTIO

Question

Exhibit

Answer Area

• PHI data was found within the development and test environments.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption
• A large volume of ICMP traffic is detected from an external source to Server2.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption
• Unauthorized software was discovered on technician workstations.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption
• A large number of potentially malicious emails is reaching end-user and shared mailboxes.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption
• The internet-facing web server allows access to internal data without requiring credentials.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption
• Sensitive materials were found on a fax machine in a common area.
  Select controlImplement web content filterRequire data deidentificationFilter echo request repliesRequire user authenticationImplement IDS/IPSImplement SPFImplement MDM solutionImplement file integrity monitoringImplement PIN to printImplement email encryption