| Risk Area | Risk Description | Inherent Risk Level |
|---|---|---|
| Data Privacy | Unauthorized access to sensitive personal health information (PHI) | High |
| Data Security | Breach of encrypted medication data at rest or in transit | High |
| Authentication | Compromise of user credentials (username/password) | High |
| Cloud Infrastructure | Misconfiguration or vulnerabilities in AWS services (EC2, S3, Lambda) | High |
| Database Security | Unauthorized access or data leakage from PostgreSQL instance | High |
| API Security | Exploitation of vulnerabilities in RESTful APIs | High |
| Compliance | Non-compliance with HIPAA regulations | High |
| Mobile App Security | Vulnerabilities in the mobile application | Medium |
| Web Application Security | Exploitation of vulnerabilities in the React.js frontend | Medium |
| Third-Party Integrations | Security risks in integration with HealthHub Mobile | Medium |
| Push Notification Security | Interception or manipulation of medication reminders | Medium |
| Continuous Deployment | Introduction of vulnerabilities through automated deployment processes | Medium |
| Monitoring and Logging | Failure to detect or respond to security incidents | Medium |
| User Error | Accidental data exposure or incorrect medication input by users | Medium |
| Data Integrity | Corruption or unauthorized modification of medication data | Medium |