SozoRock Health is seeking to enhance the cybersecurity posture of its Canadian digital platform. The project aims to assess cybersecurity risks, document the flow of Personal Health Information (PHI), and ensure compliance with relevant privacy regulations, including HIPAA, PHIPA, and BC’s FIPPA/PIPA. Students will have the opportunity to apply their knowledge of cybersecurity and data protection by developing threat mitigation strategies and validating encryption and authentication protocols. The project will also involve preparing foundational controls to support future SOC 2 Type II readiness. This initiative is crucial for safeguarding sensitive health information and maintaining the trust of SozoRock Health's users. The project will provide a practical experience in regulatory compliance and cybersecurity risk management.

The project deliverables include a comprehensive cybersecurity risk assessment report, a documented PHI data flow analysis, and a set of validated encryption and authentication protocols. Additionally, students will develop a threat mitigation strategy and prepare a foundational controls document for SOC 2 Type II readiness. These deliverables will collectively enhance SozoRock Health's compliance with privacy regulations and strengthen its cybersecurity framework.