Navigating Cybersecurity Challenges in Healthcare

Healthcare cybersecurity challenges continue to escalate. Healthcare is a prime target for cybercriminals, as healthcare organizations often house sensitive and personal data, and the already complex space received even more threats in the wake of the pandemic and telehealth expansion.

So, how exactly can healthcare entities best manage security concerns? It’s not an easy answer, but one that requires a multi-pronged approach.

Is Your Healthcare Organization Meeting Cybersecurity Standards?

The first part of having a robust cybersecurity plan is meeting standards, specifically the NIST CSF (National Institute of Standards Cybersecurity Framework). The framework was developed in 2014 and stands as the gold standard for proactive cybersecurity initiatives.

While the framework covers every aspect of security, it’s not always easy for organizations to implement. A report from a cybersecurity consulting firm confirmed this assumption, finding that only 44% of hospital and health systems were in conformance to NIST CSF protocols. The report comes to this conclusion after an analysis of over 300 assessments from 2019.

The study detailed failings in four of the five core functions of NIST—identify, protect, respond and recover. Only detect remained flat.

What does this mean for healthcare cybersecurity? It illustrates a lag in establishing and executing comprehensive security measures. If healthcare organizations don’t improve, they put themselves at great risk, because hackers will continue to use more sophisticated practices to initiate breaches or plant malware.

Navigating Cybersecurity Challenges in Healthcare Internal-01

New Threats Arise in the Pandemic

The impact of COVID-19 permeates healthcare in every imaginable way, including spurring an increase in cybersecurity threats. A report from INTERPOL highlights that COVID-19 related phishing attacks are creating concerns. Cybercriminals are also using ransomware and DDoS (distributed denial of service) to impact healthcare infrastructure.

The uptick in ransomware may directly correlate to healthcare entities having to deploy remote systems quickly and an increase in telehealth services. These technology platforms are essential to keep the healthcare ecosystem working and ensure patient care; however, they are also new endpoints for access from cybercriminals.

What’s on the Horizon: New Concerns for Healthcare Cybersecurity

In the August 2020 Healthcare Data Breach Report, the number of breaches in August was less than the peak in June with 37 reported cases. However, August does represent the highest number of compromised records, with 2,167,179. The most prevalent cause was hacking, with the network server being the top location.

These data points seem to align with the shortcomings of healthcare on the NIST CSF. Beyond just the constant rise of breaches and the need for healthcare organizations to bolster their strategies, there are more trends every stakeholder in the sector should have on their radar.

Connected medical devices

These IoT (Internet of Things) devices are becoming extremely critical for managing chronic diseases and providing innovative new ways for care, but they also represent a risk.

Vulnerabilities exist, and not just in as a means for someone to infiltrate a network. They could also change the device itself, which is a patient safety issue. Healthcare systems need to work in concert with the manufacturers of products to ensure they remain secure.

The resurgence of ransomware

Ransomware is becoming the single biggest threat to healthcare cybersecurity. A recent attack left a large healthcare system’s network shutdown, impacting 250 hospitals.

In response, the HHS (Health and Human Services) Cybersecurity Program issued an update relating to the Ryuk ransomware. HHS provides a history of Ryuk and how to mitigate it, including cybersecurity awareness training for employees around phishing, implementation of Intrusion Detection Systems (IDS), blocking suspicious IP addresses, and other best practices.

Patient access portals

With the new interoperability rule finalized in March, patient access is a key provision. Payers and providers will have to provide patients a portal to access their medical records. While HHS has deferred the enforcement of these rules due to COVID-19, it’s still something that healthcare entities must be planning for, and that should include security protocols.

Navigating Cybersecurity Challenges in Healthcare Internal-02

Interoperability has long been the Achilles heel in healthcare digitization standardization; thus, security weaknesses will still be prevalent.

Mergers, acquisitions, and closures

In the past two years, the proliferation of mergers, acquisitions, and closures of hospitals has risen. Bankruptcy is a leading cause of closure or acquisition. With uncertainty during a public health crisis, many organizations are vulnerable.

If hospitals close or are acquired, patient data must be exchanged, converted or shared. These represent opportunities for hackers and should be top of mind for those impacted.

Telehealth expansion

Telehealth has finally become mainstream. It’s been a lifeline for patients and providers during the pandemic, with Medicare even allowing for greater coverage. While it’s enabling continuity of care, it does pose new cybersecurity challenges.

Healthcare organizations need to be vigilant about the platforms they choose, how they are used, and the networks where they sit. Organizations might consider practices like penetration testing to check the stability of the system.

Preparing Your Organization to Overcome Cybersecurity Hurdles

Healthcare cybersecurity is complicated and involves lots of people, processes and technology. Working to align with NIST CSF is certainly a great direction. Additionally, you should be monitoring trends and developing new, proactive ways to keep data safe.

In healthcare, protecting key data leads to more time spent ensuring positive outcomes, dollars saved that can be used elsewhere, confidence in the healthcare industry and in specific hospitals and systems, and more.

Telehealth, interoperability and other leading-edge solutions and best practices have the potential to revolutionize healthcare, and securing those capabilities will allow the industry to forge the best path forward.

One of the best ways to protect data is using an EHR that has a security certification from the Office of the National Coordinator for Health Information Technology (ONC). ChartLogic is proud to hold this certification, demonstrating the company’s commitment to security and compliance.

Learn more about the ChartLogic EHR today.

For the latest news, videos, and podcasts in the Healthcare Industry, be sure to subscribe to our industry publication.

Follow us on social media for the latest updates in B2B!

Twitter – @MarketScale
Facebook – facebook.com/marketscale
LinkedIn – linkedin.com/company/marketscale

Follow us on social media for the latest updates in B2B!

Image

Latest

cloud environments
Rethink Everything: Modern Cloud Environments Demand a Fusion of New Security Architectures, Continuous Education and Educated Partnerships
April 22, 2024

As businesses increasingly transition to cloud environments, the conversation around cybersecurity has become more crucial. The shift from on-premise to cloud-based infrastructures offers notable benefits like scalability and cost savings, yet it introduces unique challenges and complexities in security management. The stakes are high, with a significant rise in cyber threats exploiting the vulnerabilities […]

Read More
Bullying, Suicide, and Society The Unseen Crisis in K-12 Education
April 22, 2024

In a recent episode of the Secured podcast hosted by Mike Matranga and Mike Monsive of ASAP Security Services, the tragic case of a transgender student named Nicks Benedict from Oklahoma grabbed national attention. Benedict, a 16-year-old who identified with he and they pronouns, died by suicide after a bullying incident at school. The […]

Read More
acoustics CAD simulation
Acoustics CAD Simulation: The Future of Aerospace Design
April 22, 2024

As industries strive to meet stringent noise regulations and enhance acoustic performance, acoustic CAD simulation has become an essential tool in aerospace design. The European Environment Agency reports that noise pollution affects the well-being of millions, emphasizing the need for advanced acoustic solutions to mitigate these effects. What cutting-edge strategies and technologies can address […]

Read More
zero-emission vehicles
Forum Mobility Leads Sustainable Supply Chain Revolution with Zero-Emission Vehicles Subscription Model
April 22, 2024

As Earth Day shines a spotlight on environmental stewardship, the conversation around sustainability has extended its roots deep into the veins of the global supply chain. With stringent regulations coming into effect in California, mandating the transition to zero-emission vehicles for port entry, the race to adapt has been catalyzed. This push towards sustainability, […]

Read More