A patient views information that is not theirs when they sign in to the hospital's online portal. The patient calls the support center at the hospital but continues to be put on hold because other patients are experiencing the same issue. An incident has been declared, and an engineer is now on the incident bridge as the CyberOps Tier 3 Analyst. There is a concern about the disclosure of PII occurring in real-time. What is the first step the analyst should take to address this incident?
A) Evaluate visibility tools to determine if external access resulted in tampering
B) Contact the third-party handling provider to respond to the incident as critical
C) Turn off all access to the patient portal to secure patient records
D) Review system and application logs to identify errors in the portal code

Question

Quizplus · Accepted Answer

The first step is to turn off all access to the patient portal to prevent further unauthorized access and secure patient records, addressing the immediate risk of PII disclosure.

A Patient Views Information That Is Not Theirs When They