Medical devices are soft targets for threat actors. They were built for a specific clinical use case. As a result, these devices have only the necessary components to do the job and keep the production cost low. As a result, typically, they do not have enough resources (e.g., …

Being prepared makes dealing with cyberattack incidents less stressful. Despite our best effort to prevent cyberattacks, there is still a possibility that an incident will occur. Do we have a plan for when that happened? Do your staff know what to do and when? …

It is safe to say that no system or software is 100% secure. The question is whether we have mitigated the vulnerabilities which already been discovered or the attackers will get to it first? Answering this question involves having a good inventory of our systems, followed by scanning them for…

Network management is crucial to care delivery. Critical systems (EHR, ERP, RCM, medical devices, etc.) are accessible through a computer network. From the users’ perspective, the net effect of a network attack is similar to a ransomware attack. …

From the perspective of cybersecurity in healthcare, asset management ensures that IT assets are safe to use to deliver care. Federal Aviation Administration (FAA) has a thorough process of certifying aircraft to be airworthy [1]. This process is critical to ensure passengers’ and operators’ safety. …

Data protection is about keeping PHI, research data, or other sensitive information confidential. It is like having invisible fences for your confidential data. Threat actors will try to steal and sell confidential information in the black market. In a recent article, Vugar Zeynalov (Cleveland Clinic’s Chief Information Security Officer) observed…

Access management affects whether your service line is disrupted for one day or three months when an attack happens. Articles about ransomware seldom mention the lack of access management, which contributed to this incident. …

With trends like work from home, remote patient monitoring, acute care at home, new ambulatory care models, etc., the topic of endpoint protection has become even more important for leaders that aspire to be business enablers. This article is the fourth in a series. In the first article, we looked…

A robust email protection system is crucial to stop email phishing attacks that often lead to ransomware. The Health Industry Cybersecurity Practices (HICP) document describes best practices for email protection. However, leaders would typically assume that adopting these practices is not cost-effective. …