Security threats and vulnerabilities
1. Analyze and assess the security threats and vulnerabilities of the database and web application given below and identify security measures which address these threats and vulnerabilities (1.5
page) - The vulnerability of the database that will need to be discussed is "extensive user and group privileges" and the vulnerability of the web application that will need to be discussed is
"broken authentication and session management."
2. Recommend changes to the company's security management policies. (0.5 page)
3. Discuss how your company, over time, would adapt the requirements to reduce security risk. (0.5 page)
4. Discuss the security threats and vulnerabilities for Viewin" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">ing Access Log and identify security measures which address these threats and vulnerabilities. (1.5 page) -Viewin" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">ing Access Log: iTrust
Medical provides a medical records system which, after a user/patient has completed the authentication process, gives access to users to view their personal access log. The in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">information contain" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">ined in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in
this list in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">includes names of those who have accessed the in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">information, the role of the in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">individual, date and time the in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">information was accessed, and the type of transaction that occurred. In addition,
patients are able to view their personal in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">information, as well as sort the in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">in" rel="nofollow">information based on dates, and most recent access.