Healthcare IoT and medical device cybersecurity specialist, Cylera, has formed its first Advisory Council bringing together World leaders in cybersecurity to share insight and drive innovation to help tackle the myriad of security challenges facing today’s rapidly digitalizing healthcare sector.
As a critical infrastructure, healthcare remains a top target for cybercriminals with access to rich patient data and a potential to cause significant damage and disruption to patient care. This threat is ever greater with rising geopolitical tensions and potential state-sponsored attacks.
Rising geopolitical tensions
81% of UK healthcare organizations experienced a ransomware attack last year with patient in-person appointments having to be canceled as a result, for two-thirds of these organizations. Sixty-five percent admitted that a cyber-attack could increase patient mortality rates.
The average cost of a data breach in the global healthcare sector amounted to $10 million USD
The average cost of a data breach in the global healthcare sector amounted to $10 million USD (£7.9 million) last year according to IBM. And the potential cybersecurity risk to the sector is anticipated to get worse with further digitalization. Timur Ozekcin, CEO of Cylera, said: “Healthcare is undergoing a particularly dramatic digital transformation with accelerated spend in IoT expected to reach $54 billion by 2029.”
Potentially unmanaged networks
“Already medical devices account for more than 30% of connected endpoints at hospitals with devices ranging from X-Rays and CT machines, mobile ultrasound machines, radiotherapy and chemotherapy devices plus online building systems and CCTVs,” continued Tim. “Also, the number of remotely monitored patients has risen sharply in the past couple years. Connected environments are becoming increasingly more complex in healthcare and, with the sector planning further digital investment tens of thousands of more devices will join the IT networks, many of which could be a security risk, expanding a hospital’s attack surface for threat actors to exploit.”
“Remote user access, unsegmented and potentially unmanaged networks, legacy operating systems and limited visibility into IoT device risks are just some of the security challenges keeping healthcare leaders and heads of hospital IT awake at night as they try to navigate the complexities of today’s interconnected device landscape,” added Timur.
Private sector companies
Cyber threats to the healthcare sector are among the most sophisticated and targeted across any industry"
The Cylera Cybersecurity Advisory Council is made up of select members and involves CISOs, CIOs and CTOs from major healthcare providers and hospitals along with private sector companies. The Council will meet at least four times a year to share best practice, insight, and to address and tackle the unique security challenges of increasing complex interconnected healthcare systems.
One of the Advisory Council members, Brian Tschinkel, CISO at Weill Cornell Medicine, a leading academic health system in New York, said: “Cyber threats to the healthcare sector are among the most sophisticated and targeted across any industry. Healthcare networks are incredibly complex with interconnected medical and IoT devices that caregivers rely on to deliver the highest level of care to their patients.”
Future cybersecurity challenges
“It is mission critical for hospitals to have visibility of their attack surface and therefore visibility into all connected assets to help secure their organizations. I look forward to advising Cylera to help stay ahead of future cybersecurity challenges. The Advisory Council will also guide Cylera in its global expansion plans and the latest innovations to its IoT device cybersecurity and intelligence platform.”
“Cylera is at the forefront of IoT cybersecurity,” added Tomás Maldonado CISO at the NFL (National Football League) and Cylera Advisory Council member. “With increasing digitalization and rapid adoption of IoT devices across every industry, including sports and entertainment venues, it’s imperative to stay ahead of the cybersecurity risks to the connected devices that make up our new cyber-physical environments. I’m delighted to be working through the Advisory Council to help shape the future of Cylera on its mission to safeguard our connected world.”
