Cyber Security and Cloud Defence Strategy for ShieldSafe Analytics
This Level 7 Cyber Security for Business and Cloud Management portfolio examines the security challenges faced by ShieldSafe Analytics Ltd., a multinational health analytics organisation specialising in AI-enabled diagnostics and telehealth. The organisation processes high volumes of sensitive patient information, including biometric and genomic data, across hybrid-cloud environments and IoT-enabled healthcare infrastructure. Following a suspected data-exfiltration incident involving anomalous traffic from a diagnostic platform connected to third-party cloud APIs, students are required to evaluate the organisation's information environment and develop appropriate cyber-security and cloud-defence strategies. The first task focuses on information environments and the weaponisation of information. Students identify critical elements of ShieldSafe's information environment, evaluate vulnerabilities associated with the data-exfiltration incident and examine how patient data or analytical systems could be manipulated by malicious actors. Relevant real-world healthcare cyber incidents should be used to support the analysis. The second task examines offensive and defensive Information Operations. Students analyse techniques used by nation-state actors and cybercriminal organisations, including healthcare ransomware incidents such as WannaCry, and compare offensive and defensive approaches. The analysis considers how ShieldSafe can balance these approaches while protecting sensitive data and preserving trust in AI-enabled diagnostic systems. The third task applies Information Operations within legal and ethical boundaries and requires development of a secure cloud migration strategy for ShieldSafe's legacy Electronic Health Record system. The supporting student guide specifically permits students to demonstrate an implementation using Amazon AWS, including IAM users and roles, VPC configuration, security groups, web servers, EC2 instances and AWS migration services. The final task requires a comprehensive cyber-defence strategy, including implementation of Zero Trust Architecture across cloud platforms and analysis of vulnerabilities affecting cyber-physical healthcare systems such as wearable medical devices and diagnostic equipment. Students must propose controls against both remote and local attacks. Overall, the portfolio integrates information operations, healthcare cybersecurity, hybrid-cloud protection, secure migration, Zero Trust, cyber-physical security and strategic cyber defence. The work is produced as a portfolio report using PebblePad and must use Harvard referencing throughout, with appropriate citation of academic sources, images, definitions and external arguments.
Read Model Answer →