Cmgt 441 Week 2 Information Security Paper - 1077 Words

Information Security: Detroit Hospital Security Breach CMGT441: Introduction to Information Systems Security TABLE OF CONTENTS INTRODUCTION..................................................................................................................... 3 INCIDENT BACKGROUND................................................................................................... 3 REACTION TO INCIDENT.................................................................................................... 3 FUTURE RECOMMENDATIONS......................................................................................... 4 Training†¦show more content†¦Incident Background On September 24, 2010, a laptop was stolen from an unlocked Urology office at the Henry Ford Health Systems hospital. The laptop did contain password protection software; however, it may not have been enough to permit access if the thief had advanced knowledge in computers. Additionally, the information stored on the laptop did not include social security or health insurance information, but instead held â€Å"patient names, medical record numbers, dates of birth, telephone numbers, e-mail addresses, and treatment and doctor visits† (Moscaritolo, 2010, p. 1). It is unknown how many records were contained on the laptop, but all records were related to prostate services that were provided during an eleven year span. Reaction to Incident Once it was revealed that the laptop was missing, Meredith Phillips, the chief privacy officer for the hospital, notified all involved patients by letter and offered each of them a free one-year credit monitoring service (Henry Ford Health System, 2010). The hospital also established a telephone help line that addressed patient concerns (toll-free), as well as initiated an internal investigation to determine if appropriate security measures were followed. Furthermore, all employees were re-trained in security procedures and