develop using NCCoE (NIST National Cybersecurity Center of Excellence) use cases a plan for an ABAC (Attribute Based Access Control) Pilot Case. The ABAC Pilot Case provides a suggested transition...

develop using NCCoE (NIST National Cybersecurity Center of Excellence) use cases a plan for an ABAC (Attribute Based Access Control) Pilot Case. The ABAC Pilot Case provides a suggested transition program for a hypothetical hospital healthcare electronic healthcare records (EHR) system. An objective of the pilot EHR system is provide the planning steps to transition from role based access control (RBAC) to an attribute based access control system (ABAC). ABAC is additive to RBAC.Question Scope: Build a Plan for an ABAC Pilot Case for a Hypothetical Inova Fairfax Hospital Transplant Center: Please consider using actual Inova Fairfax references for a Hypothetical Inova Fairfax Hospital: Transplant Center use case for the pilot EHR.ABAC Pilot Case: Building on Two NCCoE Use Cases: Integrating Selected NCCoE Use Case Analysis Please consider using with attribution the work of the NIST NCCoE (National Institute of Standards and Technology National Cybersecurity Center of Excellence) as presented in two use cases:

1. 
   NCCoE Use Case: RBAC:
   NIST Special Publication 1800-1B: Securing Electronic Health Records on Mobile Devices, July 27, 2018. (RBAC: Role Based Access Control)


2. 
   NCCoE Use Case: ABAC:
   NIST Special Publication 1800-3B, C: Attribute Based Access Control, Second Draft, September 20, 2017. (ABAC)

Plan for an ABAC Pilot Case: We Provide a Suggested Ten Step Grading Template to Build a Plan for an ABAC Pilot Case Please consider a Suggested Ten Step Grading Template for developing the plan for your ABAC Pilot Case. We define the scope of your ABAC Pilot Case to be a hypothetical Inova Fairfax Hospital: Transplant Center. The test case includes a transition for three components in the hypothetical Inova Fairfax Hospital for its EHR system from RBAC to ABAC.