Information Security: The Royal Children's Hospital

Running head: INFORMATION SECURITY
Information Security: The Royal Children's Hospital
Name of the Student
Student ID
Subject:
Date:
Author’s Note:
Word Count: 2081

1
INFORMATION SECURITY
Executive Summary
The main aim of this report is to understand the importance of information security for the
popular hospital in Australia, The Royal Children’s Hospital. The major focus of the
information security is given to the balanced protectiveness of the availability, integrity and
confidentiality of that data. The credibility of the information and business operations is
eventually retained by this and hence the trust of the clients is earned. There are various
significances of this information security within any organization. This report has perfectly
explained the scenario of Royal Children’s Hospital. Moreover, after proper research, the
strategic security policy of this organization is provided by taking the stakeholders into
consideration. The final part of the report has described the potential threats and
vulnerabilities to the organizational network with their suitable mitigation techniques.

2
INFORMATION SECURITY
Table of Contents
Introduction................................................................................................................................3
Discussion..................................................................................................................................3
a) Strategic Security Policy for The Royal Children’s Hospital............................................3
b) Identify and Assess Potential Threats and Vulnerabilities with Mitigation Techniques...5
Conclusion..................................................................................................................................7
References..................................................................................................................................9

3
INFORMATION SECURITY
Introduction
Information security or InfoSec can be defined as the significant practice to prevent
the unauthorized access, disclosure, inspection, utilization, destruction and even recording the
sensitive information (Crossler et al. 2013). The data might be in physical or electronics form
and hence are extremely important for the users. The main focus is given to the efficient and
effective implementation of policies, without even hampering the productivity of that
particular organization. A specific procedure of the multi step risk management helps to
recognize the assets, potential impacts, probable controls, vulnerabilities and the respective
threat sources that are followed by assessing the effectiveness and efficiency of risk
management plan (Von Solms and Van Niekerk 2013). The basic guidance, industry
standards and policies are set for this purpose on the antivirus software, firewalls, passwords
and encryption.
The following report will be outlining a brief discussion on the information security
on a popular children’s hospital in Melbourne Australia, namely The Royal Children’s
Hospital. This report will research, develop as well as document the basic security policy for
this particular organization. Moreover, the several security incidents would be identified her
with probable threats and vulnerabilities and their mitigation techniques.
Discussion
a) Strategic Security Policy for The Royal Children’s Hospital
The Royal Children’s Hospital or RCH is one of the most popular children’s hospitals
in Melbourne Australia. This is the major specialist paediatric hospital within Victoria and it
provides a complete range of the clinical service, health promotion program, health
prevention program and tertiary care for both the children as well as the young people
(Rch.org.au. 2018). This particular hospital is designated main trauma centre for the
paediatrics within Victoria for cardiac and liver transplantation.
The strategic security policy is the set of strategies for the purpose of securing any
particular system or organization (Peltier 2013). Each and every constraint regarding the
security of that organization is addressed with this security policy. The functional flow of the
organization is solely measured with this policy. The external systems or the adversaries are
also accessed by this policy and hence the data or services are secured and kept private. The