Cybersecurity Investment in Fundamental Tools and Training Is Key to Securing Your Healthcare Organization

According to Ryan Witt, Vice President, Industry Solutions at Proofpoint, Inc., phishing emails are still the most prevalent and dangerous sources for security breaches. In this video, Witt and Joshua Roth, Chief Information Security Officer at Children’s Hospital of Orange County (CHOC), discuss how they protect against breaches through fundamental investments in tools and training.

This interview with Healthcare IT Today took place in the shadow of the recent cyberattack on Change Healthcare, which is still preventing thousands of health care providers from receiving payments.

Witt says that training, processes, and technology can all play a role. There are tools not only to trap suspicious email, but to authenticate the person who sent an email message.

Roth says that attacks can target particular job titles and departments, but that everybody is at risk, and sometimes people get more attacks the longer they have worked for the institution. Witt lists HR, finance, payroll, and clinical research as being commonly attacked, along with foundations.

At CHOC, cybersecurity training starts at orientation. The hospital uses actual phishing email and SMS messages that have come in to do simulations that teach staff how to recognize fake requests for credentials. The team tries to make people feel proud when they find and report a phishing attempt.

Incident response is also “essential,” and staff must learn how to restore data and applications quickly after a cyberattack.

Both interviewees advised getting the basics right. Although attackers now use generative AI to quickly create persuasive email messages, there are a lot of ways a healthcare organization can defend themselves against these attacks and it often doesn’t require AI.

Watch the video for more background on healthcare cybersecurity fundamentals, the importance of cybersecurity training, and things you can do to better secure your organization.

Learn more about Proofpoint: https://www.proofpoint.com/healthcare

Learn more about Children’s Hospital of Orange County: https://www.choc.org/

Listen and subscribe to the Healthcare IT Today Interviews Podcast to hear all the latest insights from experts in healthcare IT.

And for an exclusive look at our top stories, subscribe to our newsletter and YouTube.

Tell us what you think. Contact us here or on Twitter at @hcitoday. And if you’re interested in advertising with us, check out our various advertising packages and request our Media Kit.

Proofpoint is a proud sponsor of Healthcare Scene.

About the author

John Lynn

John Lynn is the Founder of HealthcareScene.com, a network of leading Healthcare IT resources. The flagship blog, Healthcare IT Today, contains over 13,000 articles with over half of the articles written by John. These EMR and Healthcare IT related articles have been viewed over 20 million times.

John manages Healthcare IT Central, the leading career Health IT job board. He also organizes the first of its kind conference and community focused on healthcare marketing, Healthcare and IT Marketing Conference, and a healthcare IT conference, EXPO.health, focused on practical healthcare IT innovation. John is an advisor to multiple healthcare IT companies. John is highly involved in social media, and in addition to his blogs can be found on Twitter: @techguy.

Add Comment

Click here to post a comment

   

Categories