Chapter 2 — Networks and internet services

Chapter 2 — Networks and internet services

Lesson map

Lesson 02 published. Map, example, EX004.

flowchart TD
  N0["Learning outcomes"]
  N1["2.1 Clinic networks"]
  N2["2.2 Data in transit"]
  N3["2.3 Network risks"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX004"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["2.1 Clinic networks"]
  N2["2.2 Data in transit"]
  N3["2.3 Network risks"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX004"]

[Learning outcomes]
    |
    v
[2.1 Clinic networks]
    |
    v
[2.2 Data in transit]
    |
    v
[2.3 Network risks]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX004]

Learning outcomes

You will (1) describe clinic networks and cloud connections; (2) identify where sensitive data travel; (3) note network risks for governance.

2.1 Clinic networks

Each Riverton clinic has a small network: reception computers, imaging devices, a card terminal and guest Wi-Fi for patients. All connect through a router to the internet and to cloud services. Priya learns that card terminals should sit on a separate network segment from other devices, as PCI DSS v4.0 encourages segmentation to limit the scope of card data environments. In three clinics, the guest Wi-Fi shares the same network as reception computers, which creates unnecessary risk. Patients on the guest Wi-Fi in those three clinics can reach the same network as computers that open patient records.

2.2 Data in transit

Patient data travel from clinics to the cloud practice system, from imaging devices to the image archive and from reception to laboratories by email. Priya checks whether each path is encrypted. The practice system and image archive use encrypted connections. Laboratory orders sometimes go by ordinary email with patient names and treatment details. She records this as a risk and suggests the secure messaging feature that the practice system already includes but few staff use. Because the secure messaging feature is already licensed, the fix costs training time rather than money.

2.3 Network risks

Priya lists network risks for governance: guest Wi-Fi mixed with clinic devices, card terminals not separated, routers with default passwords in two clinics and no central view of which clinic networks match the standard design. She ranks them by impact and ease of fixing. Separating guest Wi-Fi ranks first because it is simple and reduces exposure of clinical devices. She learns that clear network standards help multi-site organisations keep clinics consistent. The default router passwords in two clinics rank close behind, since they are just as quick to change.

Worked example

Priya maps clinic networks, finds mixed guest Wi-Fi and unencrypted lab emails and ranks network risks.

Synthetic case. Clinic networks are synthetic; PCI DSS v4.0 is real.

Errors and limits

Site surveys can miss changes. Encryption checks need technical confirmation.

Exercises

• EX004 — Card terminal placement. Where should card terminals sit? Rubric: 3 = on a separate network segment;; 2 = segment;; 1 = guest Wi-Fi;; 0 = none.
• EX005 — Unencrypted path. Which data path was not always encrypted? Rubric: 3 = laboratory orders by ordinary email;; 2 = lab email;; 1 = vague;; 0 = none.
• EX006 — Top network fix. Which fix ranked first? Rubric: 3 = separating guest Wi-Fi from clinic devices;; 2 = guest Wi-Fi;; 1 = vague;; 0 = none.

Synthesis

Network maps reveal where data travel unprotected and where segmentation is needed.

Continue studying — chapter 02 of 30

← Chapter 01 (draft) · Course chapter index · Chapter 03 (draft) →