Information Security Management for Nursing School in Australia

Running head: INFORMATION SECURITY MANAGEMENT
Information Security Management
Name of the Student
Name of the University
Author Note

1INFORMATION SECURITY MANAGEMENT
Abstract
NTN is a health institute that prepares the nurses for their respective services in Australia. Its
main campus is located in Sydney and the satellite campuses are located in Darwin and Cairns.
NTN has made agreements with three private hospitals in Sydney, Darwin and Cairns to provide
the internship and training to the students of the nursing school. All three private hospitals and
the main and satellite campuses of NTN are connected to the Internet. Lecture, tutorial and
laboratory classes are conducted in the campus in Sydney and they are live-video streamed to the
satellite campuses forming a virtual classroom. The instructors and the students in the satellite
campuses can directly communicate with the lecturer in the Sydney campus when a virtual class
is in progress. At any time, there will be at most 200 students in the main campus and a
maximum of 100 students in each satellite campus participating in a virtual class. However, these
numbers are expected to double within the next couple of years. The following report would be
based on handing the information security in the institution after the ICT approach is applied in
the institution since NTN had recently appointed staff for its Information Security Division
headed by a Chief Information Security Officer (CISO) to design and launch an information
security program.

2INFORMATION SECURITY MANAGEMENT
Table of Contents
Introduction......................................................................................................................................3
a) Legal issues related to mishandling of information of patients by the mobile teams of NTN 3
b) Ethics in InfoSec of the staff of Information Security Division of NTN................................4
c) The measures that the Information Security Division should take to prevent all staff
members of NTN from handling information unethically...........................................................5
d) Assume that you obtained a job at the Information Security Division of NTN. Your line
manager asked you to study the InfoSec programs and policies of similar health-related
organizations on the web and provide the following information:..............................................6
i) Components of InfoSec programs that you found...............................................................6
ii) National and/or international InfoSec standards that these organizations follow...............7
Conclusion.......................................................................................................................................7
References........................................................................................................................................8

3INFORMATION SECURITY MANAGEMENT
Introduction
According to the latest technological advancements it is not a very new implementation
that live campuses are introduced within various educational institutions. The provision of the
virtual classrooms has been presented to the educational platforms by the technological
advancements which also comes along with information security management that the
educational institutions need to adapt (Heimes 2016). Following would be a case study report
regarding a Nursing School in Australia called NTN that is going to introduce virtual classrooms
through satellite campuses for over 200 students at once. The report regarding this would consist
of the legal issues and ethics that the nursing Institute needs to maintain and the measures that
the information security division should apply to prevent all the staff members of NTN from
unethically handling the information system.
a) Legal issues related to mishandling of information of patients by the mobile teams
of NTN
There is a possibility of massive legal issues related to the mishandling of the information
system of the patients by the mobile teams of NTN. The legal issues can be implemented on any
member of the team for the various reasons. This can be characterized by disclosing information
about the patient, mishandling the medical records or medical devices been stolen, unethical
handling of the patient data through mobiles and social beaches (Chen and Benusa 2017). For a
person to violate the handling of patient data and treating it on the basis of mismanagement the
breaches that can occur for a patient is also unethical. For this reason legal proceedings can occur
against the person who has violated the law regarding handling of patient data as well as for the