Prompt:
In a normal business day, you will be required to think about the organizational needs for data protection versus privacy protection. Understanding the data (whole records and pieces of records) and the categorization of data is important when evaluating these needs.
Consider your case study from the previous week. This week, the story takes a twist: “Headline! Data Breach at Strand Memorial Hospital!” Information on the breach has been published in an article detailing that the stolen USB drive contained sensitive patient data, including social security numbers and insurance information in plain text.
Assignment Question:
As a practitioner, would you approach this issue from a security perspective (protect the data through encryption) or a privacy perspective (protect the data by not moving it outside of the network in the first place)? Justify your response.
