Cybersecurity and Response Planningintermediate
A healthcare organization wants to use DLP to protect patient information. Give examples of data uses and explain how DLP can help.
Answer
Examples include patient information emailed in clear text, stored improperly in SharePoint or OneDrive, printed without authorization, or copied to removable media. DLP can detect sensitive information in motion, in use, and at rest, alert on violations, and in suitable cases block transmission, encrypt information, or move it. Policies should define appropriate handling for each use.
Explanation
### The concept
DLP applies data protection rules across multiple states and actions. In a healthcare setting, patient information may be exposed through email, internal storage, printing, or removable media. Detection can identify data that appears to be handled insecurely. A response might be an alert, a block on prohibited transmission, encryption, or movement of data, depending on the policy and confidence in the detection.
### What a good answer covers
- Name relevant patient-data use cases, such as email, storage, printing, or removable media.
- Explain that DLP covers data in motion, in use, and at rest.
- Describe at least one response, such as alerting, blocking, encryption, or moving data.
- Connect responses to an organization's handling policy.
### Terms
- **Patient information**: Health-related information about a person that an organization must handle carefully.
### Remember
Protect the information across its full lifecycle, not just while it crosses the network.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free