In late November, as a thick layer of smog settled on the All-India Institute of Medical Sciences in New Delhi, patients began to experience extended wait times. Long lines snaked along the vast building and backed up for several yards. Computers at the hospital had stopped working, so medical reports could not be generated. Though patients were still being treated, paper bills were being handed out. After a few days, people who feared that traveling back home would be too expensive began to sleep under a nearby overpass to wait it out. A massive cyberattack had compromised the health data of millions of patients, from those who live in extreme poverty to high-profile politicians, bureaucrats and judges. The Delhi Police had a bigger problem at hand. They were in possession of an email that read, "What happened? Your files are encrypted? What is the price to repair? The price depends on how fast you can pay to us," reported news sources. The police soon confirmed that the servers at AIIMS were attacked and data was being held for ransom. Police sources were quoted as saying the attack originated oustide the country. Cybersecurity experts express larger concerns. Since India does not have robust cybersecurity systems or strong data protection laws, the breach has made observers uneasy about plans to digitize the health records of all Indians. Cybersecurity experts are doubtful about getting informed consent as that concept is relatively new in the country. With plans for ubiquitous sharing of health records across hospitals, doctors, insurance agencies and health tech firms, Indians' health data is expected to be more prone to leaks, data breaches and exploitation. Currently, the safety of a patient's data will depend on how safe the hospital servers are. Under the present regulatory regime, all hospitals will be responsible for storing and protecting the patient data they collect. a) Identify the ethical issues associated with ransomware attacks on critical infrastructure. b) What measures would you suggest to pursue digitization while balancing the risks of scaling up? Justify.

Answered by 1 topper · CSE 2023

Syllabus: Public/Civil service values and Ethics in Public administration: Status and problems; ethical concerns and dilemmas in government and private institutions; laws, rules, regulations and conscience as sources of ethical guidance; accountability and ethical governance; strengthening of ethical and moral values in governance; ethical issues in international relations and funding; corporate governance.