What are the common security threats? Give proper mechanisms to mitigate them.

Threats vs safeguards — write as pairs.

Threats: Malware (virus/ransomware/spyware deleting patient files), phishing (fake hospital mail stealing passwords), hacking via weak/unpatched systems, DoS on appointment portal, insider USB theft, open-Wi-Fi eavesdropping.

Mechanisms:

1. MFA + roles — Password + OTP/biometric; doctor/nurse/clerk rights with logs.
2. Firewall + IDS/IPS — Filter traffic; alert and block attacks.
3. Antivirus + patching — Updated scan; timely OS/app updates; scan pen-drives (main ward source).
4. Email filter + training — Block .exe, verify sender; never share OTP.
5. Encryption + signature — HTTPS, hashed passwords, signed reports (ETA 2063).
6. Backup + monitoring — Offline full/incremental patient DB backup with restore drill; SoC/CERT watch.

Patient data loss can cost lives — backup and access control are non-negotiable.