5 Security Risk Analysis Myths in the Healthcare Industry

The COVID-19 pandemic threw multiple challenges at the healthcare industry. The sector saw a steep increase in demand that led to the collapse of health infrastructures in different parts of the world. What’s more, the industry experienced an unprecedented cybercrime surge.

According to a report, the most attacked sector in 2020 was healthcare,1 and experts expect this trend to continue into 2021 and beyond. Increased adoption of a hybrid workforce model and telemedicine have created vulnerabilities threat actors are eager to exploit.

Prioritize Compliance for Your Business

One of the many challenges you probably face as a business owner is dealing with the vague requirements present in HIPAA and PCI-DSS legislation. Due to the unclear regulatory messaging, “assuming” rather than “knowing” can land your organization in hot water with regulators.

The Health and Human Services (HSS) Office for Civil Rights receives over 1,000 complaints and notifications of HIPAA violations every year.1 When it comes to PCI-DSS, close to 70% of businesses are non-compliant.2 While you might assume it’s okay if your business does not comply with HIPAA or PCI-DSS since many other companies are non-compliant as well, we can assure you it’s not. Keep in mind that being non-compliant puts you and your business at risk of being audited and fined.

Attention, Attention… This is not a Drill!

Recently a major Health Insurance Provider sent out a “Security Due Diligence Questionnaire” to all of its partners and vendors. If you work in the health insurance industry and received this notification, this request may have come to you as quite a shock.

Paging Doctor Google… Doctor Google, Please Report “Everywhere”.

Initially reported by the Wall Street Journal and corroborated by the New York Times, Google and health care provider Ascension (the second-largest managed health system in the U.S.) initiated “Project Nightingale” last year in the shadows of ominous secrecy.

Are IoT devices allowing access to your data?

Does your business use “Smart” TVs, “Smart” Monitoring Systems, or any other type of  Internet of Things (IoT) “Smart” devices? Then be well aware, these devices may be spying on you and stealing your data!