Posts Tagged ‘healthcare information security’

Guest Post: Rethinking Healthcare Cybersecurity by Focusing on the Attacker, not the Attack

October 4th, 2018 by Ofer Israeli

Why are healthcare systems so challenging to secure? What is driving this complexity. How might we rethink our approach?

Healthcare systems, like all digital networks today are increasingly inter-connected and consumer-driven. The digital transformation necessary to make them agile, also renders them easy targets for data and identity theft, insurance fraud, and other forms of cybercrime. As the recent spate of ransomware has shown, cyberattacks on healthcare institutions also disrupt vital services and risk patient safety.

Beyond the health organization’s core staff, a wide variety of guests, students, visitors, patients, maintenance workers and others have direct physical access to healthcare systems and devices. Temporary workers and contractors require access to sensitive systems while employed. External interconnection of these systems with universities, research partners, and other remote services further mitigates the effectiveness of perimeter and access security controls. Higher and thicker security walls will not support the organization’s need to break down barriers, share information, and increase patient access.

Clearly, a new approach is required. If we cannot stop attacks, then we must stop the attackers. This is not a semantic nuance. The key to protecting healthcare systems in the future will be to transform our thinking—from a focus on defending ourselves from an infinitely expanding phalanx of attacks and attack vectors, to instead focus on disrupting the attack process itself regardless of attack style or source. We must stop the attackers.

As difficult as that might sound at first blush, there is, in fact, a silver bullet that will disrupt the vast majority of attacks. Malicious actors targeting healthcare systems all share a common trait that makes them vulnerable to disruption and detection. Regardless of how they enter a healthcare network, or what their intent, attackers must move laterally across the healthcare network to access their target applications, devices, systems, and data. To move undetected, they must gather intelligence about the environment and make careful decisions regarding their attack path.

The key then, quite simply, is to disrupt the attacker’s decision-making process—to blind and befuddle them so that they cannot progress their attack. Done well, cyber deception technology disrupts the attacker’s intelligence gathering process, and destroys their ability to make accurate decisions, by flooding the attack plane with false and misleading data. Similar in effect to evasive maneuvers used in aerial combat such as disgorging flak, disrupting radar, and disorienting GPS signals, these new technologies destroy the attacker’s ability to navigate, and ensure they are detected by any movement they do decide to make.

The challenges of securing healthcare systems will continue to grow as attackers, and their tools, methods, and infrastructure, become more sophisticated and diverse. Just as digital transformation is improving efficiency and patient outcomes, the traditional security mindset must be transformed to a modern security mindset. To protect these new system architectures, we must refocus our efforts from defending against attacks to disrupting the attack process itself. Deception offers a promising path forward in this direction.

Ofer Israeli

Ofer Israeli

About the Author: Ofer Israeli, founder and CEO of Illusive Networks, pioneered deception-based cybersecurity. He leads the company at the forefront of the next evolution of cyber defense. Prior to establishing Illusive Networks, Mr. Israeli managed development teams based around the globe at Israel’s seminal cybersecurity company Check Point Software Technologies and was a research assistant in the Atom Chip Lab focusing on theoretical Quantum Mechanics.

Infographic: Healthcare’s Blockchain Security Solution

September 26th, 2018 by Melanie Matthews

As technology continues to advance, healthcare data security is becoming a great paradox where data breaches are quite commonplace. Blockchain technology is a promising solution to healthcare cybersecurity, according to a new infographic by Duquesne University.

The infographic provides an overview of blockchain basics, adoption and how it can be used in healthcare.

A New Vision for Remote Patient Monitoring: Creating Sustainable Financial, Operational and Clinical OutcomesAs healthcare moves out of the brick-and-mortar traditional setting into patients’ homes and their workplaces, and becomes much more proactive, the University of Pittsburgh Medical Center (UPMC) has been expanding its remote patient monitoring program. The remote patient monitoring program at UPMC has its roots in the heart failure program but has since expanded to additional disease states across the integrated delivery system’s continuum of care.

A New Vision for Remote Patient Monitoring: Creating Sustainable Financial, Operational and Clinical Outcomes delves into the evolution of UPMC’s remote patient monitoring program from its initial focus on heart failure to how the program was scaled vertically and horizontally. Click here for more information.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: Top of Mind for Health IT in 2018

February 16th, 2018 by Melanie Matthews

Cybersecurity, consumer-facing technologies, predictive analytics and virtual care are the technology trends that are top of mind for healthcare IT executives, according to a new infographic by the Center for Connected Medicine.

The infographic examines how these trends may impact the healthcare industry in 2018.

2018 Healthcare Benchmarks: Telehealth & Remote Patient MonitoringOnce the domain of science fiction, these telehealth technologies have begun to transform the fabric of healthcare delivery systems. As further proof of telehealth’s explosive growth, the use of wearable health-tracking devices and remote patient monitoring has proliferated, and the Centers for Medicare and Medicaid Services (CMS) has added several new provider telehealth billing codes for calendar year 2018.

2018 Healthcare Benchmarks: Telehealth & Remote Patient Monitoring delivers the latest actionable telehealth and remote patient monitoring metrics on tools, applications, challenges, successes and ROI from healthcare organizations across the care spectrum. This 60-page report, now in its fifth edition, documents benchmarks on current and planned telehealth and remote patient monitoring initiatives as well as the use of emerging technologies in the healthcare space.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: Cybersecurity in Healthcare

February 12th, 2018 by Melanie Matthews

Cybersecurity threats in the healthcare industry remain stronger than ever, and data breaches remain a top concern, according to a new infographic by Symantec.

The infographic examines the progress healthcare organizations have made in addressing cybersecurity risks and where gaps still exist.

Healthcare Trends & Forecasts in 2018: Performance Expectations for the Healthcare IndustryHealthcare Trends & Forecasts in 2018: Performance Expectations for the Healthcare Industry, HIN’s 14th annual business forecast, is designed to support healthcare C-suite planning as leaders react to presidential priorities and seek new strategies for engaging providers, patients and health plan members in value-based care.

HIN’s highly anticipated annual strategic playbook opens with perspectives from industry thought leader Brian Sanderson, managing principal, healthcare services, Crowe Horwath, who outlines a roadmap to healthcare provider success by examining the key issues, challenges and opportunities facing providers in the year to come. Following Sanderson’s outlook is guidance for healthcare payors from David Buchanan, president, Buchanan Strategies, on navigating seven hot button areas for insurers, from the future of Obamacare to the changing face of telehealth to the surprising role grocery stores might one day play in healthcare delivery. Click here for more information.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: 5 Questions Patients Should Ask About Healthcare Information Security

September 8th, 2017 by Melanie Matthews

Patients need to understand the information security protections by their healthcare providers, according to a new infographic by ISACA.

The infographic outlines a few questions that patients can ask of their providers to ensure that those organizations are applying
appropriate and diligent stewardship of the data that they hold in trust.

UnityPoint Health has moved from a siloed approach to improving the patient experience at each of its locations to a system-wide approach that encompasses a consistent, baseline experience while still allowing for each institution to address its specific needs.

Armed with data from its Press Ganey and CAHPS® Hospital Survey scores, UnityPoint’s patient experience team developed a front-line staff-driven improvement action plan.

Improving the Patient Experience: Engaging Front-line Staff for a System-Wide Action Plan, a 45-minute webinar on July 27th, now available for replay, Paige Moore, director, patient experience at UnityPoint Health—Des Moines, shares how the organization switched from a top-down, leadership-driven patient experience improvement approach to one that engages front-line staff to own the process.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: Is Your Healthcare Network Security on Life Support?

August 4th, 2017 by Melanie Matthews

With the growth of the Internet of Things (IoT), connected biomedical technology has provided a rich opportunity for healthcare to improve lives and patient outcomes. However, it has also increased fears among IT leaders in hospitals and healthcare facilities that with the proliferation of these IoT medical devices comes some very real threats to protected health information and to financial and patient safety risks, according to a new infographic by Comport Technology Solutions.

The infographic examines how why cyber criminals target healthcare organizations, the most likely types of cyberattack events targeting healthcare and how healthcare IT is focusing security efforts on IoT to mitigate threats.

Healthcare Trends & Forecasts in 2017: Performance Expectations for the Healthcare Industry Not in recent history has the outcome of a U.S. presidential election portended so much for the healthcare industry. Will the Trump administration repeal or replace the Affordable Care Act (ACA)? What will be the fate of MACRA? Will Medicare and Medicaid survive?

These and other uncertainties compound an already daunting landscape that is steering healthcare organizations toward value-based care and alternative payment models and challenging them to up their quality game.

Healthcare Trends & Forecasts in 2017: Performance Expectations for the Healthcare Industry, HIN’s 13th annual business forecast, is designed to support healthcare C-suite planning during this historic transition as leaders prepare for both a new year and new presidential leadership.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: What Hospital CIOs Think About Data Security and Clinical Mobility

June 5th, 2017 by Melanie Matthews

Effective patient engagement has been linked with increased adherence to medical plans, reduced hospitalizations, and higher revenues, according to a new infographic by ChartLogic. One way to generate these results is by meeting patients where they spend the most time, i.e. social media.

The infographic looks at which secure communication methods clinical staff use, the top four reasons hospitals use pagers and mobile health strategies.

Healthcare Trends & Forecasts in 2017: Performance Expectations for the Healthcare Industry Not in recent history has the outcome of a U.S. presidential election portended so much for the healthcare industry. Will the Trump administration repeal or replace the Affordable Care Act (ACA)? What will be the fate of MACRA? Will Medicare and Medicaid survive?

These and other uncertainties compound an already daunting landscape that is steering healthcare organizations toward value-based care and alternative payment models and challenging them to up their quality game.

Healthcare Trends & Forecasts in 2017: Performance Expectations for the Healthcare Industry, HIN’s 13th annual business forecast, is designed to support healthcare C-suite planning during this historic transition as leaders prepare for both a new year and new presidential leadership.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: The Healthcare Security Challenge

October 21st, 2016 by Melanie Matthews

The role of IT in healthcare delivery has expanded dramatically in just the last few years—and so has the threat from data thieves. A single, stolen healthcare record is worth hundreds of dollars on the black market—creating an estimated $6 billion cybersecurity problem for the industry as a whole, according to a new infographic by NaviSite.

The infographic examines the latest data on the healthcare security problem and a seven-step plan for protection.

2016 Healthcare Benchmarks: Digital HealthPerson-centric health management is slowly acknowledging the device-driven lives of patients and health plan members and incorporating these tools into care delivery and management efforts.

2016 Healthcare Benchmarks: Digital Health examines program goals, platforms, components, development strategies, target populations and health conditions, patient engagement metrics, results and challenges reported by healthcare organizations responding to the February 2016 Digital Health survey by the Healthcare Intelligence Network.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: Cyber Attacks Hit Healthcare

April 4th, 2016 by Melanie Matthews

The healthcare industry is under pressure to advance its use of technology to control costs, digitize patient information and streamline operations. But with significant increases in cyber attacks and the sensitive nature of healthcare data, security is a growing concern, according to a new infographic by ESET.

The infographic examines: which threats healthcare organizations fear most; how healthcare breaches affect consumer behavior; and what security solutions are most effective.

Covered Entity Manual Covered Entity Manual is a template-style download manual that can be easily adapted to align with your compliance needs as a covered entity. All content complies with the Omnibus Rule.

Covered Entity-Specific Manual provides you with a generic, comprehensive set of policies and procedures: 33 privacy policies; 30 security policies; 6 policies that address common requirements of both the privacy and security rules; 1 breach notification policy; and 12 forms and templates, including a notice of privacy practices.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.

Infographic: Healthcare Security Risks in the Cloud

January 4th, 2016 by Melanie Matthews

As healthcare cloud use continues to grow (more than IT realizes, in fact!), organizations may be putting themselves at increased risk for data breaches if employee use isn’t properly managed, according to a new infographic by CDW Healthcare.

The infographic looks at cloud use among healthcare organizations and personnel, the biggest benefit of the cloud in healthcare, the risks associated with cloud use without the proper controls, where organizations are the most vulnerable and best practices in cloud use.

Business Associate ManualBusiness Associate Manual is a template-style manual that can be easily adapted to align with your compliance needs as a business associate (BA). All content complies with the Omnibus Rule.

Specifically developed to help BAs meet complex privacy & security compliance requirements. The Business Associate Manual includes: 6 privacy policies; 30 security policies; 6 policies that address common requirements of both the privacy and security rules; 1 breach notification policy; and 4 forms and templates.

Get the latest healthcare infographics delivered to your e-inbox with Eye on Infographics, a bi-weekly, e-newsletter digest of visual healthcare data. Click here to sign up today.

Have an infographic you’d like featured on our site? Click here for submission guidelines.