A security administrator is developing controls for creating
audit trails and tracking if a PHI data
breach is to occur.
The administrator has been given the following requirements:
* All access must be correlated to a user account.
* All user accounts must be assigned to a single individual.
* User access to the PHI data must be recorded.
* Anomalies in PHI data access must be reported.
* Logs and records cannot be deleted or modified.
Which of the following should the administrator implement to meet
the above requirements?
(Select THREE).
A. Eliminate shared accounts.
B. Create a standard naming convention for accounts.
C. Implement usage auditing and review.
D. Enable account lockout thresholds.
E. Copy logs in real time to a secured WORM drive.
F. Implement time-of-day restrictions.
G. Perform regular permission audits and reviews.
Answer:----------
A. Eliminate shared accounts.
C. Implement usage auditing and review.
G. Perform regular permission audits and reviews.
A security administrator is developing controls for creating audit trails and tracking if a PHI data...
The discussion: 150 -200 words. Auditing We know that computer security audits are important in business. However, let’s think about the types of audits that need to be performed and the frequency of these audits. Create a timeline that occurs during the fiscal year of audits that should occur and “who” should conduct the audits? Are they internal individuals, system administrators, internal accountants, external accountants, or others? Let me start you: (my timeline is wrong but you should use some...
A new version of the operating system is being planned for installation into your department’s production environment. What sort of testing would you recommend is done before your department goes live with the new version? Identify each type of testing and describe what is tested. Explain the rationale for performing each type of testing. [ your answer goes here ] Would the amount of testing and types of testing to be done be different if you were installing a security...