Cybersecurity and Privacy

Of 50 worldwide COVID-19 apps analyzed in Nature Medicine, only 16 promised to anonymize, encrypt and secure the data they collect.

This month we look at how the COVID-19 pandemic is fundamentally changing healthcare organizations' approaches to security, now and in the future.

According to an Amnesty International investigation, personal information, including names, national ID numbers, health status and location data could have been exposed.

"SweynTooth" impacts several microchip and medical device manufacturers, and could allow bad actors to wirelessly crash or access these products, according to the agency.

Prescription drug information and names were exposed, but financials and Social Security numbers were not. 

It might just be a matter of time until a phishing attempt finds its mark, meaning that the best strategy for healthcare organizations is to understand their attackers and prepare for the worst, says Healthmap Solutions CISO Kathleen Mullin.

Healthcare consumerism and cybersecurity might seem to be in tension, but it's the job of security professionals to make it work, and that starts with a culture change.

Suzanne Schwartz, Associate Director for Science and Strategic Partnerships at the FDA, shared insights and advice on medical device security, including cybersecurity attack response and best practices for CIOs and CTOs.

Developing a better link between cybersecurity and patient-facing services is what Dan Taylor, director of security of NHS Digital, believes is a top priority – a good cybersecurity strategy focused on people.

Nick Dougherty, managing director of MassChallenge HealthTech, is energized by all the pilots converting to broader implementation and is working on an assessment review to help innovators get over the security hurdles.