Problem
Vulnerability Two: The manager at the emergency healthcare office tells you they have begun thinking about HIPAA compliance. To help move toward compliant practices, they would like to better protect their physical assets, including the examination rooms and back office, but are not certain how to do so. Part of the back rooms are used to store medicine that they want to keep available onsite so patients can collect everything they need in one visit, but this is not an area they want everyone to have access to.
i. Explain which of the risk domains Vulnerability Two exemplifies.
ii. Implement security controls to mitigate the risk that is introduced by Vulnerability Two.
iii. Assess how the implemented controls will be useful in mitigating risk for the security domain.