Challenges healthcare is facing

1 August 2020 Cyber Security

The healthcare industry has been forever changed by digital transformation. Innovation in the medical space has led to advances in new treatments as well as cost savings that do not negatively impact the quality of care. The added benefit: faster, better networks have allowed for the growth of telemedicine, bringing quality care to thousands who did not have access before.

An unfortunate side effect has been that cybercriminals are targeting the healthcare sector now more than ever. As a result, cybersecurity is critical to the success of health systems, which are increasingly at risk as cybercriminals look to steal patient data or hold internal resources for ransom. The vulnerabilities that enable these attacks exist in any vertical, but in the case of healthcare, they can be life-threatening.

Here are three areas that healthcare IT and security teams should focus on to improve their security practices.

1. Prioritising the security of telemedicine

Online tools and medical IoT devices for monitoring patient health are now ubiquitous – they are even used in surgery. Patient portals give people more control over their healthcare and better access to critical information. This wave of medical digital transformation cannot exist, however, without ensuring that data and connections are kept safe from cybercriminals.


Doros Hadjizenonos.

Healthcare IT teams face several challenges when it comes to combatting cybercrime. To fight their battle, they must have visibility into the extended network architecture, data, and operating systems, as well as the Internet of Medical Things (IoMT) devices on the network. Two of the most important tools for achieving this level of visibility are network access control (NAC) and cyber threat assessment programs (CTAPs).

2. Defending against insider threats

Cyber threats do not just come from outside the organisation. Insider threats – whether by malicious insiders, negligent users, or careless users – can be even more dangerous than external threats. The reason: these threats not only come from inside the secure network perimeter, but also use different methods than external threats, creating additional challenges for healthcare security teams in the monitoring and mitigation of threats.

User training and network segmentation are an important start. But protecting against insider threats also requires full visibility into the network, as well as a robust set of benchmarks against which to compare threat data – things that have proven to be difficult in the healthcare space so far.

3. Defending the Internet of Medical Things

Connected medical devices are a fundamental component of coordinated healthcare. Many patients rely on them to maintain their health, even when they cannot visit the doctor – think heart monitors, blood sugar level regulation, and chronic disease management. Unfortunately, these IoMT devices are innately insecure and vulnerable to the same types of attacks that impact other technologies, putting patients’ health – and lives – at risk.

This issue is made all the more complicated because cybercriminals do not need to be within close physical proximity to compromise a connected medical device. Upon gaining access to a healthcare network – whether through a misconfigured or unsecured device, or vulnerable cloud data service or health system application – cybercriminals often have access to all devices connected to that network. With this in mind, it is imperative that the healthcare industry, including the developers of these IoMT devices, take steps to secure this technology moving forward.

The healthcare industry cannot afford to be lax with security as it rapidly adopts digital transformation. The patients who rely upon the health system for critical healthcare services, whether in person or remotely, are put at risk every time they make use of telemedicine offerings, use IoMT devices, or access data via an unsecure connection.

The solution for healthcare security is multi-pronged. It requires cross-network visibility, prioritised threat management, real-time threat assessment, and a strategy for remediation should an event occur. The key to this approach is to plan ahead, and to leverage threat analysis to secure against both internal and external threats to the healthcare facility.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cyber Talent: It is more about Talent than Cyber
Issue 7 2020 , Cyber Security
Four million trained workers are needed to fully bridge the skills gap in the cybersecurity field around the world and properly defend organisations against threat actors.

Read more...
Increased cloud visibility and security
Issue 7 2020 , Cyber Security
Sophos adds cloud visibility features from Cloud Optix to Intercept X Advanced for Server with EDR.

Read more...
Ransomware and customer loyalty
Issue 7 2020 , Cyber Security
Arcserve research uncovers links between ransomware, consumer purchasing behaviour and brand loyalty.

Read more...
IoT will transform industrial security
Issue 7 2020, Kaspersky , Cyber Security
55% of organisations globally are confident the Internet of Things will change the state of security in industrial control systems (ICS).

Read more...
BYOD: bring your own danger
Issue 7 2020 , Cyber Security
Five cybersecurity threats that jeopardise the security of mobile devices and the keys to optimising their protection in a connected world.

Read more...
The arms race of AI in cybersecurity
CCTV Handbook 2020, Axis Communications SA , Cyber Security
Cybersecurity goes further than network video and audio, but these are as likely to be targeted as much as any network-connected device.

Read more...
Exploiting the global pandemic
Issue 7 2020 , Cyber Security
Cyber criminals targeting remote work to gain access to enterprise networks and critical data reports FortiGuard Labs.

Read more...
Integrated security is key to Huawei Mobile Services
Issue 7 2020 , Cyber Security
To ensure sufficient mobile device security, the technology giant incorporates security into its chip, device and cloud capabilities.

Read more...
Cybersecurity becomes key enabler of sustainable business growth
Issue 7 2020 , Cyber Security
The adoption of rushed digital transformation strategies has left many facing unintended complexities and challenges.

Read more...
Africa under cyber-attack
Issue 7 2020, Kaspersky , Cyber Security
Kaspersky has reported that South Africa, Kenya and Nigeria saw millions of cyber-attacks in 2020 and the year is not over yet.

Read more...