CYBER CORNER


the medical device security and broader healthcare security space. Medical devices remain largely unmanaged in terms of cybersecurity thanks to a legacy report- ing structure and ownership of these systems, which are largely managed by Clinical Engineering or Biomedical Departments rather than by the CISO and CIO. But healthcare IoT is more than just medical devices, it includes all sorts of connected hospital building management systems that control HVAC, elevators and other physical systems critical to hospital workflows. How would we minimize risks during pandemic care management without high-performing HVAC? However, these systems are now connected to the Internet and are often managed by groups of people hundreds of miles from the site where they are located. The same thing is true for elevators. So there are a lot of critical components in hospitals that aren’t directly managed by the CISOs or IT that could pose a cybersecurity risk.” “What should the government’s role


be then, in protecting healthcare?” Wider asked. “I do think there are certain cases where the government can make a differ- ence,” Mihai said. “The PATCH Act was so needed. Honestly, there have been big hospital groups, and I was in one of them, trying to drive similar outcomes by trying to force contractual terms on manufactur- ers. But it honestly wasn’t working well.” “Sometimes you need to have that push


from the federal government,” Uzupis offered. “People will say, this legislation is for bad apples only. Well, we have a few


ADVERTISERS


Janette Wider, Richard Staynings, Julian Mihai, Daniel Uzupis


bruises. I honestly think that sometimes legislation doesn’t go far enough.” And, Staynings noted, “Medical


devices 25 years ago were fairly inert. It’s all changed, and we now live in a hyper- connected world in which everything is connected to everything else via a network. In healthcare that can often include the indirect connection of patients via the medical devices keeping them alive or monitoring their vitals. However,” he added, “there’s another bigger question: should the government take a bigger role in protecting healthcare? Most health systems have a skeletal IT security team. Imagine you’re in a rural hospital in Idaho. How are you expected to defend yourself against the


WEBSITE


People’s Liberation Army of China or the Kremlin? There’s definitely a bigger role for the government in providing some level of protection for cyberattacks against national critical infrastructure. And healthcare is one of the 16 industries listed by President Obama under PPD21.” “I totally agree,” Mihai said: “we’re faced


with a unique situation in which there’s no downside to the criminal trying. Imagine if there were a burglar trying to break into your house, and there were no consequences for them trying to continuously break into your house. Overseas cybercriminals cur- rently act with almost total impunity.” HI


Cyber Corner is continued online @ www.hcinnovationgroup.com


PAGE


10to8 ...........................................................................10to8.com......................................................................................................... 27 Accumen....................................................................accumen.com.................................................................................................. 21 Availity........................................................................availity.com....................................................................................................... 9 Azara Healthcare.....................................................azarahealthcare.com.....................................................................................C4 Capsa Healthcare.....................................................CapsaHealthcare.com................................................................................... 13 eVideon ......................................................................evideon.com.................................................................................................... 29 FlipMD .......................................................................flip-md.com...................................................................................................... 25 NextGen Healthcare ................................................nextgen.com...................................................................................................... 3 Nuance Communications........................................nuance.com..................................................................................................... 23 PointClickCare..........................................................pointclickcare.com........................................................................................ 17 ServiceNow...............................................................servicenow.com.............................................................................................C2 Virtusa.........................................................................virtusa.com...................................................................................................... 31 Vizient.........................................................................vizientinc.com................................................................................................... 7


MARCH/APRIL 2023 | hcinnovationgroup.com 33

Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36