Evaluate at least three categories of data that could be found in a healthcare organization and to determine the relative value of that data to an outside attacker.

Evaluate at least three categories of data that could be found in a healthcare organization and to determine the relative value of that data to an outside attacker. Categories of information could include health history, scheduled procedures, lab test results, medication record, payer information (e.g. Insurance, Medicaid, Medicare info), personal information (including birthdate, address, ssn), or others.

Indicate the following for each of the three categories you choose:
1. Type(s) of harm that could occur from breach: reputation, financial, health related, other (include at least a 2-3 sentence explanation for each type of harm that may result)
2. Impact of the harm on the individual: low, med, high (Include a 2-3 sentence explanation. Minor inconvenience would be low. Death would be high.)
3. Impact of the harm on organizations: low, med, high (Include a 2-3 sentence explanation. This could include both the healthcare organization and any other organization that may be impacted financially (e.g. credit card companies) or otherwise by the breach.)
4. Impact of the harm on society: low, med, high (Include a 2-3 sentence explanation. If only a few individuals are harmed then the impact on society would be low even if the impact on the individual might be high.)
5. Difficulty of the attack: low, med, high (Include a 2-3 sentence explanation. How hard do you think it would be for an outside attacker to access this information? Feel free to use your current organization as a point of reference for your answer. For example, if no one in your organization has access to outside websites, then the difficulty of attack might be much higher.)