Privacy & Security

Results from an annual healthcare cybersecurity survey from HIMSS show why healthcare organizations need adaptable security strategies, perhaps including analog file backups, reports Lee Kim, senior principal of cybersecurity and privacy at HIMSS.

Meanwhile, staff at the health system say they don't have patient orders and can't page doctors. As it works to restore clinical systems, Ascension says it's working with law enforcement and sharing threat intelligence to help prevent similar attacks.

Provider organizations first should do the basics, such as following HIPAA security rule compliance and conducting a security risk analysis, advises Carolyn Metnick, partner and Healthcare and Privacy & Cybersecurity team member at Sheppard Mullin.  

The attack has disrupted clinical operations for one of the largest health systems in the country.

Also: OM1 now offers a platform that translates population patterns for clinical decision-making at the provider level.

All organizations need to define where their cybersecurity risks lie, and consider gaps in threat monitoring, says Steve Cagle, CEO of Clearwater. "It's not just the technology, but it's also the people and the process part of it," he said.  

CIOs, CISOs, CMIOs and CEOs should all be collaborating to strengthen security controls while also enabling clinicians to access the information they need to treat patients, says Dr. Eric Liederman, CEO of CyberSolutionsMD.  

Monash Health has disclosed that it is one of those affected in the latest ransomware attack in Australia.  

Reflecting on pioneering roles, Christopher Falkner, 2024 HIMSS Changemaker and Sodexo senior director of digital strategy and cybersecurity, talks about his journey from engineer connecting medical devices with EHRs to protecting them.