Network Infrastructure
The UK government has released a statement in conjunction with many key players in the telecoms industry to announce their elevated support during the COVID-19 crisis.
Zero Trust
Intelligence agencies, security firms and Big Tech giants and all ringing alarm bells over the growing threat from cybercriminals in the wake of the global COVID-19 pandemic – with ransomware attacks, opportunistic phishing threats and other malicious activities all threatening healthcare organizations worldwide.
Scams by so-called gray-marketers for personal protective equipment have been increasing steadily as healthcare professionals face shortages of critical supplies.
The FBI has issued a warning about Kwampirs malware targeting supply chains including the healthcare industry – Kwampirs is a backdoor Trojan that grants remote computer access to attackers.
"One of the reasons for this increased risk to the supply chain and the healthcare sector is a rise in the number of people who are now working from home because of the COVID-19 pandemic," Elad Shapira, head of research for third-party security-management-automation specialist Panorays, wrote in a research note.
"As a result, companies now face technology risks such as unmanaged devices, shadow IT and insecure access, along with human risks like increased phishing attempts."
Meanwhile, Microsoft is warning hospitals to watch out for sophisticated ransomware attacks that could target them through their VPNs and other network devices. The company has already sent targeted notifications to dozens of at-risk hospitals.
In particular, Microsoft singled out the ransomware campaign REvil (also known as Sodinokibi), which actively exploits gateway and VPN vulnerabilities to gain a foothold in target organizations.
Following a successful exploitation, attackers can then steal credentials, elevate their privileges and move laterally across compromised networks, installing ransomware or other malware payloads.
Critical infrastructure systems in hospitals are particularly threatened by ransomware, which can be locked up by malicious actors and only unlocked following hefty payments.
Cybercriminals are also exploiting the crisis by selling Chloroquine, COVID-19 test kits and respirators for astronomical prices, reported a cybersecurity software provider, a finding that mirrored recent advisories from European law enforcement agency Europol.
The firm found underground vendors offering surgical masks and N95 respirators for a 400% to 500% markup, and others selling prescriptions of Chloroquine plus Azithromycin for $500 to $1,000, which for a 30-day, 250 mg. prescription would normally run between $111 and $165.
The World Health Organization has reportedly seen attempted cyberattacks double since the onset of the COVID-19 crisis, and a vaccine-testing facility has also been targeted with ransomware.
As healthcare organizations battle the pandemic, they're also facing heightened cybersecurity threats from malicious actors looking to take advantage of the crisis caused by the outbreak.
Nathan Eddy is a healthcare and technology freelancer based in Berlin.
Email the writer: nathaneddy@gmail.com
Twitter: @dropdeaded209
coronavirus
Spanish CIOs from major hospitals explained in a HIMSS Europe webinar how they are handling the extreme situation caused by the pandemic.
The Abu Dhabi Health Workforce Management System allows clinical staff from across the UAE to volunteer their services, or apply to work, in the healthcare sector during the current outbreak of COVID-19.
Its updated Digital Health Implementation Playbook Series offers tips and best practices for making the most of virtual consult technologies.
The cloud-based platform, developed in collaboration with Stanford Medicine, enables hospitals to submit requests for specific items and be matched with peer organizations who can provide them.
COVID-19
Activists have raised privacy concerns about the involvement of big data firm Palantir.
Some health systems foresee delayed implementation efforts because they lack the bandwidth right now to plan for them – but some technologies, particularly telehealth, are in high demand.
Matthew Kull, who had served as CIO on an interim basis, will take charge of the health system's strategic approach for digital transformation.
As the number of lives touched by COVID-19 is continuously mounting, so are the efforts of IT departments to counter the rising pressure on hospitals. The recent HIMSS Webinar, 'Italy and Germany facing COVID-19', hosted by Charles Alessi, Chief Clinical Officer, HIMSS, had two CIOs from private hospital chains in Italy and Germany, respectively, share their lessons learned from the coronavirus outbreak.
WHY IT MATTERS
Italy, in particular, has had to deal with a surge of infected patients and a shortage of ICU beds ahead of other Western countries. For almost five weeks Elena Sini, Group CIO, GVM Care & Research, Italy, has been working tirelessly to stay ahead of the virus. She recommends the strict segregation of COVID-19 positive and negative patients to minimise the risk of infection. For the same reason Sini urges systems to ramp up remote working capacities to protect staff, be it in the form of telemedicine and video-conferencing capabilities for doctors and nurses or to enable IT staff work from home. Additionally, IT staff on wards receive training from those familiar with working in an ICU environment on how to behave safely and nurses in ICU units are trained to take care of some IT-related issues by themselves to protect their colleagues from IT.
Sini and Henning Schneider, CIO, Asklepios Kliniken, Germany, both members of the HIMSS board, advocate ceasing all ongoing IT projects to support doctors and nurses on the wards. This has become particularly important as the ongoing hospital reorganisation in reaction to COVID-19 requires additional user rights to be set up in a fast manner, especially as hospitals increase intensive care bed capacity by cancelling elective surgeries, converting recovery rooms and building tents to house patients. Sini reports a lack of hardware due to broken supply chains and insufficient bandwidth capacities as the demand on fixed landlines bounced up to about 90% on fixed landlines and 40% on the mobile network in Italy.
Measures that have been key are highlighted below:
Ability to control and monitor information via dashboard/automated matrix to assess situation in real-time.
Creation of an incidence plan.
Deploy collaboration tools.
Use of e-learning tutorials to bring newly recruited healthcare workers up to speed.
Secure operation of hospital information systems, especially when extending access rights.
Ramp up telemedicine capabilities.
High bandwidth capacities to support telemedicine and remote working.
Sini would like EHR-vendors to proactively add new capabilities to facilitate the monitoring and documentation of COVID-19 cases, while Schneider suggested that better infrastructure to enable communication between hospitals in Germany as well as a centrally organised COVID-19 reporting system on a state level would help improve coping with the pandemic.
THE LARGER CONTEXT
As the COVID-19 pandemic consumes more medical resources daily, there is a heightened interest of hospital CIOs from around the world to learn from those who have been dealing with the coronavirus outbreak firsthand. For this webinar alone, more than 2,500 people signed up from 68 countries to get directions for contingency planning.
ON THE RECORD
“The response to COVID-19 is a continuously evolving process, there is no end point and it requires adapting by the hour,” says Sini. “Collaboration tools are essential. Get ready for a significant surge in patients coming to hospitals, plan for the long haul. Although the heaviest toll is on healthcare professionals, burnout is also a concern for IT staff, so set up some psychological support for IT staff as well,” she warns.
Schneider reinforces that “each IT person is a human being who is afraid like everyone else of being infected. CIOs priority must be leadership and communication: communication with their own staff and aligning it with communication throughout the entire organisation." He also praises the spirit of collaboration across the healthcare ecosystem: “The ability to work together is amazing, not only between hospitals, but also software and hardware vendors.”
Alessi warns of looming cyber-attacks: ”People need to be aware of a heightened need of security at a time like this.” As a doctor, he also sees the need to balance medical resources: “The coronavirus totally consumes the medical system, to the degree that people with a host of non-communicable diseases don’t get treatment.”
The full recording is available here.