A hospital decided to use cloud computing for processing and storage to save cos

Question

A hospital decided to use cloud computing for processing and storage to save costs. After several months, it was discovered that the cloud provider’s storage facilities were compromised and patient information was stolen. The hospital maintained that the cloud provider should be punished and fined for the breach, while the provider responded that it was still the hospital’s responsibility under HIPAA to secure patient information and the hospital was ultimately responsible. Who do you think should be responsible? The cloud provider or the hospital? If the cloud provider is responsible, then should software companies like Microsoft be held liable for a vulnerability in their software that results in a data breach on a Microsoft server in a LAN? Where does the responsibility for the user end and the vendor begin? Your sources of information must be cited within the content of your answer and the references listed after your signature, following the APA style. Only peer-reviewed references are acceptable.

Explanation / Answer

This is the combined responsibility of cloud vendors and as well as hospital team also.

Again cloud vendors come into picture according to the agreement taken by hospital i.e. type of service choosen.

We can't say that Microsoft is liable for this data breach. No organisation would make the product development without security intentionally. Also in the agreement itself they say that it is your own risk like that even if you proceed legally nothing going to happen to them.

So when we are going to cloud we must take care about security from our side even though the agreement says it is full responsibility of vendors. Because once we lost the control over security we will be completely lost from business and also consequences would be severe.

At the same time cloud vendors also must take measures to provide security to their customers. So that nothing will be happen. Even though one security system fails the other one would secure the data or in the worst case it alerts.

Related Questions

Navigate

• Browse (All)
• Browse A
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.