Complete Case Study – New Century Health Clinic. The submission should be professional looking and contain professional communication. Utilize Word to document your responses. Points will be lost for misspelled words and misuse of grammar. NEW CENTURY HEALTH CLINIC New Century Health Clinic offers preventive medicine and traditional medical care. In your role as an IT consultant, you will help New Century develop a new information system. Background New Century Health Clinic has decided to computerize its office systems. The associates hired you, a local computer consultant, to perform a preliminary investigation. You had several meetings with Dr. Tim Jones to discuss the various office records and accounting systems. Anita Davenport, New Century’s office manager, participated in those meetings. In a report to the associates at the end of your investigation, you recommended conducting a detailed analysis of the patient record system, the patient insurance billing systems, and the patient scheduling systems. Although the systems could be developed independently, you recommended analyzing all three systems together because of the significant interaction among them. You presented your findings and recommendations at a late afternoon meeting of the associates. After answering several questions, you left the meeting so they could discuss the matter privately. Dr. Jones began the discussion by stating that he was impressed with your knowledge and professionalism, as well as your report and presentation. Dr. Jones recommended accepting your proposal and hiring you immediately to conduct the systems analysis phase. Dr. Garcia, however, was not as enthusiastic and pointed out that such a study would certainly disrupt office procedures. The staff already had more work than they could handle, she argued, and taking time to answer your questions would only make a situation worse. Dr. Jones countered that the office workload was going to increase in any event, and that it was important to find a long-term solution to the problem. After some additional discussion, Dr. Garcia finally agreed with Dr. Jones’s assessment. The next morning, Dr. Jones called you and asked you to go ahead with the systems analysis phase of the project. Assignments 1) Review the office organization chart you prepared in Chapter 1 for New Century. 2) List the individuals you would like to interview during the systems analysis phase. 3) Prepare a list of objectives for each of the interviews you will conduct. 4) Prepare a list of specific questions for each individual you will interview. 5) Conduct the interviews. (This may be done by the student acting as interviewer and roleplaying as the interviewee, also.) 6) Prepare a written summary of the information gained from each of the interviews. 7) Design a questionnaire that will go to a sample of New Century patients to find out if they were satisfied with current insurance and scheduling procedures. Your questionnaire should follow the suggestions in this chapter. Also, decide what sampling method you will use and explain the reason for your choice.
(Solved Homework): Complete Case Study – New Century Health Clinic. The submission should be professional looking and contain professional communication. Utilize…
Expert Answer
The things that we came to know from the interviews and the roleplaying as an interviewee are as follows.They requeire immediate attention and gaining a boost up here is very important.
CIS Control #4: Continuous Vulnerability Assessment and Remediation
The handling and remediation of the vulnerability is the most important part because it plays an major role in getting the company devised to make the system or the network secure.Hence, here is the complete explaination to the continuous Vulnerability Assesment and the Remediation.
Flaws:
- Updating Process:
- The updating process here in the chromium is showing some very severe flaws like when the chromium is trying to update they update in the two partitions.
- It does not comes into effect until and unless both the partitions are completed updating , so , if there are some errors in anyone of the partition it may result in exiting of the update and then it would become very hard to process the updates.
- Rebooting If Anything Hapens:
- As, the security expert said at the end of the video that if we catch any irregularity in the system than we must reboot and then things will change back to normal.
- This is a very bad approach and must not be practiced because when we shutdown the system when such processes are being handled there can be changes in the registry entries and leading to the irregular operating of the softwares and many processes of the OS.
Security Issues:
- The security issues in Chromium has been divided by Google into three types. They are as follows:
- High Severity
- Medium Severity
- Low Severity
- The security issues that occurs to the security team of the chromium is been solved in coming recent times.As they have proved back in time to solve many XSS bugs ,Kernel Memory Corruption,etc.
- As it mostly appears and keeps on appearing as a security issue in chromium I think that there are many Memory Corruption bugs remaining in the application and must be taken care of.accordingly.
- Recently there were many vulnerabilities found out in Chromium and taken care of accordingly.
Hence, these are the possible security issues that might be residing in the Chromium.
Exploiting Vulnerabilities:
- The latest Chromium version was affected with a Multiple Vulnerability for allowing Remote Attackers to bypass security restrictions. In this exploit the attacker was able to record audio/video without even getting the user know it.
- This was done by bypassing the security restrictions and was made possible because of the UX(User Exprience) flaw in the application.
- The hacker could use this video to note down the daily acitivities of the victim and would take advantage of it as he wants.This flaw was fixed for the local users but for websites it is possible to spy on you till now and any website can record on any user accessing their website.
Hence, these are the exploits that are undertaken by an hacker to harm the victim in any possible way.
