Health Care Data in Norway

Health Care Data in Norway

Multiple Choice

You recently changed hospital, and your doctor is asking you to send him your health record information to his Gmail. What should you respond?

• Ask what his Gmail address is

• Collect it to a zip file and securely send it

• Ignore the doctor and do nothing

• Alert the administration of possible misconduct

Multiple Choice

What is more valuable in the black market?

• Medical Records

• Credit card details

According to reports, medical information is worth between 10 and 40 times more than your credit card number on the black market because unlike credit cards,

your medical data(surgeries, ailments, terminal illness) cannot be changed. 

Multiple Choice

Why is Health care data important to malicious actors?

• Ability to influence public opinion

• Misuse data especially related to STDs and terminal illness to coerce people

• Financial gain through Ransome attacks

• All of the above

Healthcare-related data is of great interest for malicious actors and nation-states due to its sensitivity and ability to influence public opinion.

The stolenhealth care data can further be used for carrying out a variety of crimes mostly leveraging details specific to terminal illness or diseases and medical identity theft.

Multiple Choice

Does Norway have records of major health care attacks?

• True

• False

False

On 8 January 2018, one of the biggest cyberattacks of its kind was carried out againstthe largest health authority in Norway,

 Helse Sør-Øst RHF [Health South East RHA],which serves over half of the Norwegian population

Multiple Choice

What does GDPR do?

• Works for student rights

• Works for rehabilitation of refugees

• Implements data protection principles

• Works for welfare of health officials

C. Implements data protection principles 

GDPR implements data protection principles that incorporate appropriate organizational measures to protect personal data. 

For example, using pseudonymization or full anonymization where appropriate.

Multiple Choice

What should you do if you get an email from 'Helsen0rge' saying you need to change your password followed by the need of immediate login?

• Ignore it

• Click to see what's wrong

• Answer the mail to make sure that it is legit

• Contact Helsenorge and report the incident, then login to your account manually from your browser.

Did you notice the 'o' in 'Helsen0rge'?

One of the common methods of phishing is by replacing the letter 'o' with '0'. However, a lot of people still fall victim to this scam. If you notice similar things, you should report them to the authority right away.

Multiple Choice

Aker hospital was paralyzed by a virus attack in 2011. What impact did it have on the staff?

• Doctors had to compromise their salary due to huge financial loss during the attack

• Doctors and patients couldn't access their test results

• Doctors were asked to hold all service

• It didn't affect anyone

Aker hospital was paralyzed by a virus attack in 2011 where they had to isolate the entire computer system from the outer world for quite some hours.

Though no patient data were compromised, the doctors and patient couldn’t access their test results and x-rays until the virus was completely removed from the system.

Multiple Choice

What do you understand by spear phising?

• Sending highly personalized emails pretending to be a trusted sender

• Sending fish like image which contains malicious content

• Sending disturbing content in email

• None of the above

Spear phishing is the act of sending highly personalized emails pretending to be the trusted sender. 

One simple example of spear phishing can be that the “from” part of an email is often spoofed to make it look like it’s from a known entity or from a domain that looks

similar to yours or your trusted partners. For example, the letter “o” might be replaced with the number “0,” or the letter “w” might be changed to “ш” from the Russian alphabet