{"id":1264,"date":"2018-01-25T12:25:59","date_gmt":"2018-01-25T16:25:59","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1264"},"modified":"2018-02-23T11:31:02","modified_gmt":"2018-02-23T15:31:02","slug":"healthcare-professionals-time-to-rethink-your-cybersecurity-strategies","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/","title":{"rendered":"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies"},"content":{"rendered":"

\"healthcare-cybersecurity-strategies\"<\/p>\n

Hard to believe that it is only January of 2018, what with the flood of hacking headlines already coming in by the day. Less surprising than the deluge is the primary target of so many of those breaches and ransomware incidents: healthcare.<\/span><\/p>\n

Hospitals and healthcare organizations have seen no respite from digital malice this year. Electronic health recorder (EHP) provider Allscripts was hit by a devastating ransomware attack last week\u2014 one they may not have recovered from at time of writing. Florida\u2019s Agency for Health Care Administration reported that they may have experienced a hack that <\/span>compromised<\/span><\/a> 30,000 Medicaid patients\u2019 data. <\/span>Hancock Health<\/span><\/a> in Indiana also suffered from their data being held for ransom\u2014a $50,000 ransom they were forced to pay. On the other side of the Atlantic, a hack on a <\/span>Norwegian health<\/span><\/a> care provider might have resulted in nearly half the population\u2019s data being compromised. \u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Perhaps these attacks aren\u2019t so surprising; healthcare providers have been a target of choice for hackers for years, and experts predicted that <\/span>2018<\/span><\/a> would see an even greater increase in similar attacks. It\u2019s already cost the healthcare industry billions of dollars and affected nearly 80% of healthcare institutions. <\/span><\/p>\n

But why is healthcare proving so lucrative? And what can you do to protect your healthcare enterprise? <\/span><\/p>\n

Healthcare Means Big Targets…And Little Security<\/b><\/h3>\n

Healthcare providers and record keepers have invested huge amounts of time and money into collecting and analyzing copious amounts of patient data. On the one hand, this has resulted in faster and more accurate diagnoses, better coordination in treatment and care, and greater access to vital information. On the other hand, it has not been matched with an investment into safeguarding that data. <\/span><\/p>\n

The problem lies with healthcare enterprises\u2019 cybersecurity budgets\u2014or more accurately the <\/span>lack thereof<\/span><\/a>. 40% of healthcare professionals spend only 1%-2% of their budgets on cybersecurity. Another 32% said they only spend as much as 6% on digital safety. One-fifth didn\u2019t know their cybersecurity budget at all. <\/span><\/p>\n

Furthermore, healthcare data is both detailed and valuable, as it specifically contains the information bad actors want. A medical chart can sell for as much as $50 on the darkweb black market. For comparison\u2019s sake, a credit card number or social security number will only sell for $1 apiece. <\/span><\/p>\n

Vast Array Vulnerabilities and Security Holes in Healthcare<\/b><\/h3>\n

Compounding the budgetary issues in healthcare cybersecurity are the numerous entryways for attackers to access patient\u2019s medical data. The bring-your-own-devices (BYOD) revolution has affected the medical world as well, with an estimated 81% of healthcare enterprises allowing doctors and other professionals to use their own mobile devices to access patient data. However, nearly half of healthcare organizations aren\u2019t even attempting to secure those devices\u2014leaving hackers more potential means of ingress than they could ask for. With the prevalence of hacking tools and programs available out-of-the-box from darkweb markets, even an inexperienced hacker can find a way in through a single exposed endpoint. \u00a0<\/span><\/p>\n

In a statement to <\/span>Dark Reading<\/span><\/a>, CEO and President of Cryptonite Mike Simon said “Healthcare networks are highly interconnected and this provides a substantial opportunity for cyberattackers to penetrate multiple high-value targets. Healthcare networks’ architectures typically have a relative high number of known vulnerabilities [with] missing patches and updates, embedded and exposed processors in medical devices, a large number of internet of things (IoT) devices and more.\u201d <\/span><\/p>\n

Another issue is that many healthcare enterprises assume that staying in compliance with HIPAA and HITECH indicates they are doing all they can for their cybersecurity needs. However, these compliance mandates don\u2019t reflect the changes in either IT or cybersecurity as cloud and mobile innovations take greater precedence and more attacks are aimed at those areas. <\/span><\/p>\n

Small Practices Are Particularly Vulnerable<\/b><\/h3>\n

While many large healthcare enterprises have been hit hard by the continual wave of attacks, small-to-medium healthcare providers and businesses have suffered even more. They are often dependent on the services on larger electronic records and other outsourced medical resources. Without suitable backup plans or security strategies in the wake of a vendor\u2019s attack, small-to-medium businesses will have to wait out a vendor crash. This could leave them without resources for a significant period of time\u2014and clogging up patient care as a result. \u00a0<\/span><\/p>\n

What Can Healthcare Enterprises Do to Keep Themselves Safe? <\/b><\/h3>\n

First, if you do not have one, you need to establish an <\/span>incident response plan<\/span><\/a> within your enterprise or practice for if and when the worst happens in the digital world. It is essential to make sure your employees know what to do if they cannot access their records due to a hack, how to contact in the event of a hack, and who will take charge during these events. <\/span><\/p>\n

For small-to-medium sized practices, consider your <\/span>backup and recovery strategies<\/span><\/a> for your patient data in the event of a breach. If you completely outsource your data to a third party, you need to have a plan for what happens if that third party goes down.<\/span><\/p>\n

Above all, cybersecurity in healthcare requires proactive involvement and consideration. Whether you increase your security budget, find a cybersecurity or backup solution, or hire a Chief Information Security Officer (if your practice can afford one), your enterprise needs to take your data security into your own hands. If you do pick a solution, make sure it is implemented and managed properly. Know where your data is stored and how it is accessed. <\/span><\/p>\n

Cybersecurity is an investment, but the amount in time and money you will save in the long run will make it far worth it.<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

Hard to believe that it is only January of 2018, what with the flood of hacking headlines already coming in by the day. Less surprising than the deluge is the primary target of so many of those breaches and ransomware incidents: healthcare. Hospitals and healthcare organizations have seen no respite from digital malice this year. […]<\/p>\n","protected":false},"author":41,"featured_media":1265,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[56,95,145,112,21],"acf":[],"yoast_head":"\nHealthcare Professionals: Time to Rethink Your Cybersecurity Strategies<\/title>\n<meta name=\"description\" content=\"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies\" \/>\n<meta property=\"og:description\" content=\"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2018-01-25T16:25:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-23T15:31:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/\",\"name\":\"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg\",\"datePublished\":\"2018-01-25T16:25:59+00:00\",\"dateModified\":\"2018-02-23T15:31:02+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"healthcare-cybersecurity-strategies\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies","description":"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/","og_locale":"en_US","og_type":"article","og_title":"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies","og_description":"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2018-01-25T16:25:59+00:00","article_modified_time":"2018-02-23T15:31:02+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/","name":"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg","datePublished":"2018-01-25T16:25:59+00:00","dateModified":"2018-02-23T15:31:02+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Healthcare providers have been a target of choice for hackers for years. Is your enterprise prepared for a patient data breach?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2018\/01\/healthcare-mod.jpg","width":800,"height":400,"caption":"healthcare-cybersecurity-strategies"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/healthcare-professionals-time-to-rethink-your-cybersecurity-strategies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Healthcare Professionals: Time to Rethink Your Cybersecurity Strategies"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1264"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1264"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1264\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1265"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}