Examkin

Question

Difficulty: HardMethods of Handling Risk

A regional healthcare network is analyzing its exposure to cyber liability following a series of industry-wide ransomware attacks. The network's board of directors implements several simultaneous strategies to protect the organization. They immediately terminate a legacy patient portal that lacked modern encryption protocols. They also mandate quarterly phishing simulation training for all employees, join a regional coalition of hospitals that mutually pools capital to cover emergent IT recovery costs, and formally assume financial responsibility for the first $100,000 of any breach through an established cash reserve. Which of the board's actions specifically represents the risk handling method of risk sharing?

  1. Joining the regional coalition of hospitals that mutually pools capital for IT recovery costsAnswer
  2. B
    Formally assuming financial responsibility for the first $100,000 of any breach through a cash reserve
  3. C
    Terminating the legacy patient portal that lacked modern encryption protocols
  4. D
    Mandating quarterly phishing simulation training for all employees

Answer

Joining the regional coalition of hospitals that mutually pools capital for IT recovery costs
The correct answer identifies the fundamental mechanism of risk sharing, which involves a formal or informal group of entities pooling their resources to absorb losses that might occur to any member of the group. By mutually pooling capital with other hospitals, the healthcare network is distributing its cyber risk exposure across the coalition rather than absorbing it alone or transferring it to a commercial insurer.

Step-by-Step Solution

1
Analyze the vignette to isolate the four distinct risk management strategies implemented by the healthcare network.
The actions are: terminating a vulnerable portal, mandating employee training, pooling funds with a hospital coalition, and establishing a cash reserve.
To accurately identify the 'sharing' method, each action must be mapped to its corresponding STARR (Sharing, Transfer, Avoidance, Reduction, Retention) category.
2
Define the risk handling method of 'sharing' in an insurance context.
Risk sharing involves a homogeneous group of individuals or businesses pooling their resources to distribute the financial consequences of a risk among all members.
Establishing the core definition allows for precise evaluation of the scenario's actions.
3
Evaluate the network's actions against the definition of sharing.
Joining a coalition to mutually pool capital perfectly aligns with sharing. The other actions represent avoidance (terminating the portal), reduction (training), and retention (cash reserve).
This process of elimination confirms the single correct action that demonstrates risk sharing.

Key Concept

Methods of Handling Risk (STARR)
Rate this question

Topics

Methods of Handling Risk

More questions from this topic