Health knows no bounds
Managing healthcare cybersecurity risk

Let's talk

Health professionals:

talk to us about your biggest challenges

Health professionals:

talk to us about breaking boundaries

Fill out our form or call us at 978-659-3500 (8 a.m. - 6 p.m. EST)

Let's talk

With information flowing throughout their organizations and patients reliant on connected devices for their healthcare needs, hospital CIOs are battling the rise of new security challenges that connected healthcare brings.

“Dealing with security of data, and the equipment that we have at the hospital, is an ongoing concern,” says David Higginson, Chief Information Officer (CIO), Phoenix Children’s Hospital. “There’s many nights I am up worrying about it, and there isn’t a year that goes by where there isn’t a new threat that comes along.”

The value of healthcare data

The proliferation of connected devices in healthcare has enabled new and innovative ways to deliver healthcare: mobile-enabled health devices can track a patient around the hospital or monitor them at home; a connected device can also be implanted under the skin, or in the heart.

Hospitals are a prime target for cybercriminals as personal health information can be worth hundreds or thousands of dollars on the black market¹. In the space of a few years healthcare has become the world’s most cyber-attacked industry, with data breaches occurring on an almost daily basis².

Threats vary in sophistication too. At the most destructive end of the spectrum a cyberattack can bring down whole systems, compromising patient records and crippling a hospital’s operations. The 2017 ransomware strain known as WannaCry spread around the world in a matter of hours and led to more than $4 billion in damage³.

Clinicians were forced to use pencil and paper to record clinical data, attempt medical care without access to patient records, and use their personal mobile phones and tablets. In some cases, hospitals had to turn patients away.

Medical devices: the new frontier

Protecting electronic information is a central role of the CIO, and as quickly as each new security threat emerges, their task is to evaluate and assess the risk it presents to their organization to avoid patient information being compromised.

The ongoing expansion of health systems is a big challenge to ensure security in and of itself. With rapidly growing integration and interconnection of disparate medical technology devices and systems where medical data is being increasingly exchanged, security threats grow. A new security frontier is connected medical devices, such as a cardiac defibrillator or an insulin pump.

Hospitals and similar healthcare organizations have more medical devices⁴ with more automation, increasing amounts of healthcare data collected, analyzed and stored in these devices.

“What really is the most concerning part to me is medical devices or medical equipment. We’ve been very focused in the past on our networks and our servers and our desktop computers. What people haven’t been as focused on is those pieces of medical equipment that have some kind of computing device or some kind of network connectivity in them,” says Mr.Higginson.

Stress-testing systems and devices

The need for more co-ordination between providers and manufacturers to deal with security concerns is a central plank of the response to new threats, particularly around medical device cyber security.

Organizations such as HIMMS convene security working groups highlighting best practices, responses and responsibilities, and the legal and regulatory framework in which issues must be addressed.

At Phoenix Children’s, regular security checks and simulated cyber-attacks are performed on medical equipment to test the robustness of systems and devices, to find where weaknesses might exist in their network.

“We have to keep one step ahead,” says Vinay Vaidya, Chief Medical Informatics Officer at Phoenix Children’s, “We have drills, we have exercises, we have phishing attacks that we launch internally to see and check for vulnerabilities in our system, and we want to keep one step ahead of the criminals, to safeguard the health of our children.”

It is critical for IT leaders to constantly assess their exposure. The US Food and Drug Administration’s (FDA) rules for cybersecurity are aimed at aiding manufacturers of medical devices in managing cybersecurity risks and call for manufacturers to create built-in security for all of their devices at all levels⁵.

Hospitals need assurance regarding the security and privacy protection of medical devices. As such, technology partners must be committed to rigorous and comprehensive security plans that assure patient data is safe and connected devices are cyber resilient.

Share this page with a colleague

¹ Forbes, ‘Your Electronic Medical Records Could Be Worth $100 to Hackers’

² HIPAA, Breach News

³ Reuters, ‘More Disruptions feared from Cyber Attack’

⁴ Deloitte

⁵ Norton, ‘The Risks of Connected Healthcare Devices’

Meeting the top
challenges in
health informatics

Visit the Philips health informatics hub

Managing medical device security is critical to IT leaders

Five tips for managing healthcare cybersecurity risk and protecting healthcare data

Discover the top tips for managing healthcare cybersecurity to protect health data, secure medical systems and avoid security breaches

Building partnerships.
Breaking barriers.

We work in partnership with health systems to help drive innovation, support their financial and operational goals, and enable their transformation in a value-driven era. The result can be both operational excellence and more connected, predictive and personalized care delivery.

See how we can support you across your enterprise

Let's talk

What are your biggest challenges in informatics? Whether its interoperability across your enterprise or achieving greater standardization of care, we partner with you to deeply understand your infrastructure and operations, and deliver solutions that help your transform your health system.

Reach out using the form below to get started.

How can we help you?

Contact information

* This field is mandatory

Country

First name*

First name (phonetic)

Last name*

Last name (phonetic)

Salutation

Academic title

Email address*

Business phone number (ex. +971 2 123 4567)

Company*

Job title

Industry

Function

Specialty

Department

State or Province

City

Address

Zip or Postal Code

By specifying your reason for contact we will be able to provide you with a better service.

We work with partners and distributors who may contact you about this Philips product on our behalf.

Follow up information

Preferred method of contact

Best time to call

Estimated time of purchase

Please enter your comments regarding the inquiry

I hereby consent to processing of my personal data and sensitive personal data (if any) and transfer of such data abroad, in accordance with the Privacy Notice that can be found here.

What is cross border data transfer?

I agree on cross-border transfer of personal information.

I hereby agree to receive by email or telephone information about Philips products, services, events and promotions, including information by mail that is appropriate to me, taking into account my activities and preferences, including the Expectations I have indicated / and in this form.

I agree that Philips may share my personal information with authorized resellers of its Philips products and equipment in order to meet my expectations as stated in this form.

I would like to receive marketing related electronic communications about Philips products, services, events, and promotions that may be relevant to me based on my user preferences and behavior. I can revoke my consent at any time.

Final CEE consent

Health knows no bounds Managing healthcare cybersecurity risk

Health professionals:

talk to us about your biggest challenges

Health professionals:

talk to us about breaking boundaries

With information flowing throughout their organizations and patients reliant on connected devices for their healthcare needs, hospital CIOs are battling the rise of new security challenges that connected healthcare brings.

The value of healthcare data

Medical devices: the new frontier

Stress-testing systems and devices

Share this page with a colleague

Meeting the top challenges in health informatics

Read more stories and articles

Five tips for managing healthcare cybersecurity risk and protecting healthcare data

Building partnerships. Breaking barriers.

Let's talk

Contact information

Health knows no bounds
Managing healthcare cybersecurity risk

Meeting the top
challenges in
health informatics

Building partnerships.
Breaking barriers.