A healthcare organization received notification that a hospital employee’s laptop that contained PHI was inadvertently left at a
local restaurant and was stolen. The laptop was password protected; however, it did not contain any encryption software. While no reports of identity theft have been reported, it is unknown what has been done with the laptop or the information on the laptop. Which of the following could the organization do to prevent this from happening in the future?
The situation given in the question can be very alarming for a healthcare organization since the laptops contain critical information and details about the employee's work.
To prevent this from occuring again in the future, the organization should educate their employees on cyber security and having a strong password. They also should implement softwares on the computers against such incidents, which can be softwares that can lock the computers and delete files that are important to the organization if an unauthorized entry is detected. In order to protect the information, they can also use a backup system for every computer the employee's use.
Terminal emulation, especially the unprotected <u>telnet </u>protocol, should be blocked from any access to all internal servers from the public network.
