Security System Evaluation and Remediation

The report identifies potential compliance issues requiring the system security plan (SSP) to be updated, including some security controls in place or planned for system requirements. This assessment is because FMC wants to improve its data management with its digitization goals. The data being stored is sensitive and may contain personally identifiable information. As FMC’s CISO, I will be responsible for identifying and developing a strategy to address the risks identified in the attached “Security Assessment Report for Fielder Medical Center” provided by the external consulting firm. This paper will outline the confirmation or rejection of the findings by evaluating the focus points of the security assessment report, and will also develop a remediation plan for compliance based on the NIST SP-800-53 revision 5.