WGU D485 Governance, Risk, and Compliance: Security Assessment Insights 2026 Update with complete solutions.

DFN1 Task 1: Governance, Risk, and Compliance The findings presented here come from a risk and gap analysis comparing the existing systems at Fielder Medical Center (FMC) with the requirements for compliance with NIST SP 800-53r5 control families and the high-level standards of PCI DSS. Currently, the system lacks sufficient protection as required by the Privacy Act. FMC's systems store personally identifiable information (PII), such as names, addresses, social security numbers (SSNs), and other sensitive data. This information is essential for authorized government agencies to access and verify doctors' qualifications. All systems at FMC are outdated and need a thorough review, prioritization, compliance checks, upgrades, and a maintenance plan. The following control families and enhancements must be addressed to ensure FMC's governance and compliance: