| | September 20188UTLOOK Healthcare Tech It's no secret healthcare has struggled to keep up with a rapidly evolving cybersecurity landscape. It's a challenge for every business and industry, but healthcare companies have unique concerns. They deal with extremely sensitive information, which is heavily targeted. Hospital groups and health systems often are built over years of acquisitions, resulting in a patchwork of different systems, governance structures, policies and procedures.Yet as healthcare becomes increasingly more digital, cybersecurity is one of its greatest business risks. The safety implications are staggering: If a medical device is compromised, or someone maliciously changes the blood type in a medical record, people can die. In my role with Premise Health, I confront many of these issues every day. However, I'm fortunate not to do it alone. We deliver onsite, near site and virtual health to organizations, many of them the nation's most respected and innovative employers. I've benefitted from this visibility into the standards, experiences and best practices of companies with very mature risk management functions. Here is what I have learned.As Technology Leaders, We Must Understand the Business of Our Organizations Too often, the information security department acts like the policy police. But our job is not to say no to things. It's to empower our company to operate at the highest level of risk possible without jeopardizing its strategic business objectives. That means understanding what those objectives are, as well as the organization's tolerance for risk.When technology leaders understand the business, security protocols can drive efficiencies instead of slowing everyone down. It creates a win-win scenario, which changes the culture around security, builds support and enhances compliance. For example, when we implemented a security management program for vendors at Premise, we were able to identify redundancies and address them. Now, instead of 30 different vendors providing the same service, we might have three close partners. We can help to proactively mature their security posture and establish a trusted advisor relationship where they are comfortable disclosing risk and looking for guidance. We're more secure and more efficient. By Joey Johnson, CISO, Premise HealthCybersecurity in the Healthcare LandscapeJoey JohnsonIN MY OPINION
< Page 7 | Page 9 >