Small and rural hospitals face great challenges on many fronts, and improving cybersecurity have a special concern. Really in Unstable financial conditions For many years, these facilities are facing tagged and resources pressures that prevent the type of spending that would keep pace with the threat.
Basic electronic hygiene tactics such as e -mail safety, multi -factor authentication and weakness surpassing some hospitals, according to the latest Microsoft White paper in cybersecurity in the rural hospitalEarlier this month.
While Microsoft sees more cooperation to enhance hospitals in cyber hospitals through private partnerships in the public and private sectors, I found that most rural hospitals are vulnerable to social engineering attacks because they do not have comprehensive training and awareness programs. Also, patching often neglects.
But another cyber security expert, Bridge O’Connor, the chief operational official of Fortalice Solutions, sees an optimistic room when it comes to identity management, the Ministry of Justice, the fragmentation of networks – and says that small hospitals can do a lot to support their flexibility, with their current resources, which may realize.
Okunor, who served the White House from 2002 to 2009, eventually became a special assistant to the White House administration, said a Zero confidence The approach is no longer optional in health care.
“Cyber security is something that each organization can improve,” she says Health care news. Even if they have made errors in the past, technology leaders can exceed the culture of fear and take action with minimal investment.
We have talked to Okonor recently, who provided some directives to rural hospitals looking to improve its cyberspace security now.
Q: What do small and rural hospitals face to find talent and keep it?
A. There are many reasons that rural and small hospitals cannot find information technology talents, such as geographical isolation that leads to a lack of qualified candidates in the region, compensation for low salaries and limited budgets and the lack of opportunities for job progress for growing professionals, are also reasonable reasons.
Q: Many rural hospitals are forced to close because revenues are less than the costs of providing care. How can they invest better in cybersecurity to protect themselves in the threat environment today?
A. I encourage all organizations to use Zero Trust Security Framework. This framework is suitable for all types of organizations because the basic principles of safety apply and can be implemented.
First, evaluate the organization’s security expectations and how to work with safety systems. Next, make a list of all devices and users who use Wi-Fi networks or systems. By obtaining this knowledge, organizations are already in the middle of the way to improve their security.
Next, implement systems like MFA to help protect access to employees, which is useful in protecting data. Finally, continue to monitor these elements, and will improve the cybersecurity of the organization.
Q: How can rural hospitals be prepared now to improve their position in cybersecurity?
A. The first field of focus for improving cybersecurity is to determine where there are weaknesses and threats in systems.
Remember the update programs and networks that may be not guaranteed. After that, people within the organization are what helps prevent cybersecurity attacks, so make sure that all employees are constantly training in security awareness, including hunting security or password safety.
Systems such as MFA are highly recommended to reduce unauthorized access. Another thing that institutions can do is to support data on the site and outside the site alike so that the loss of data from the attacks or threats of future cybersecurity is prevented.
Finally, partnership or pursuit of financing from organizations such as managed security services, the Capear Security Agency, the US Infrastructure and the Ministry of Health and Humanitarian Services can increase the organization’s cybersecurity efforts.
Q: What tips can you give to rural health care leaders on their trips to Zero Trust?
A. The best way for the Zero Trust strategy for healthcare leaders is to start management management and access through the MFA application for all employees, especially those who have access to electronic health records and administrative systems.
For further data protection, hospitals can enjoy the least estimate of employees only to access the data and systems necessary for their roles. Another important step is to separate important hospital systems or sectors and secure networks for medical devices and patients from the Wi-Fi network and administrative networks.
Finally, there is a solid data protection strategy that encodes patient data and sensitive hospitals while crossing and resting while maintaining safe backup copies outside the site that can be restored quickly after the internet breach.
Andrea Fox is a great health care editor.
Email: Afox@himss.org
Healthcare is Hosz News.
