Topic: How Hospitals with Low Cybersecurity Ratings Lag Behind

Some hospitals have not increased their cybersecurity risk ratings, putting them at a disadvantage when compared to other companies. Though they are somewhat on par with Fortune 1000 firms, health systems are still vulnerable and prone to suffer from spam, malware, and botnets.

A Study in Cybersecurity Ratings

A study that debuted in the Journal of the American Medical Informatics Association reported that some hospitals still have low cybersecurity ratings, putting them more at risk to experience a data breach. More specifically, the study sought to compare hospital cybersecurity ratings with those of Fortune 1000 firms, revealing that health systems remain increasingly vulnerable to spam, malware, and botnets.

The Importance of Cybersecurity Ratings

The fact that hospitals are lagging in cybersecurity ratings can have dire consequences, with the potential for sensitive information, medical histories, and other data to be leaked. Though some hospitals are scrambling to improve their cybersecurity ratings, they are still behind many other companies and show increased vulnerability to spam, malware, and botnets.

Importantly, sensitive information, medical histories, and other data are less likely to be breached through updating software, installing and updating security applications, and training personnel to know what to be on the lookout for.

A Higher Prevalence of Cybersecurity Attacks

Though the advent of modern technology has brought many conveniences with it, it has also presented an unprecedented opportunity for cybersecurity attacks to occur. These attacks have not only been made on hospitals and health systems but other companies as well. For example, there have been large disruptions in industries across the board, including a high number of cybersecurity attacks on pipelines, meat processors, government agencies, and other companies and organizations.

However, it is important for hospitals and health systems to remain aware that because of the high risk posed to patient care, cybersecurity attacks that impact them are prone to be breaking news events. Therefore, more preventative measures should be put in place to assure patients that their data is as reasonably safe as possible. Investing in risk management and overall information security are two ways this can be accomplished.

The importance of preemptive action is demonstrated in the case of Scripps Healthcare, which was shut down for weeks after a brutal ransomware attack. Following this attack, Scripps Healthcare began receiving lawsuits from individuals maintaining that their data should have been more protected and that the breach could have been prevented.

Key Takeaway

An alarming number of health systems are at risk to experience cybersecurity attacks due to low cybersecurity ratings. However, an investment in risk management and overall information security can help mitigate those risks and protect the data of patients.

Topic Discussed: How Hospitals with Low Cybersecurity Ratings Lag Behind