The document outlines a testing methodology policy and procedure focused on EMR, mobile apps, patient care devices, and external websites. It emphasizes the importance of vulnerability scanning, penetration testing, and remediation cycles in compliance with HIPAA, PCI, and FERPA. Additionally, it suggests documenting preferred reporting cycles and metrics such as CVSS and NVD, all while adhering to APA guidelines.

1. Testing Methodology Policy and Procedure (individual
submission)
Research and document preferred testing methodologies for:
EMR, Mobile Apps, Patient Care devices, External websites,
SDLC (hint: vulnerability scanning, penetration testing, medical
device scanning, static code analysis, dynamic code analysis,
etc.).
Research and document preferred remediation cycles for the in
scope systems (hint: HIPAA, PCI, FERPA)
Research and document preferred reporting cycles / methods for
the in scope systems (hint: vulnerability metrics, such as CVSS,
NVD). Note: Still follow APA for this assignment, which may
not be appropriate in an organization.