SailPoint Report Highlights That The Healthcare Industry Is Chronically Understaffed, Leaving It More Vulnerable To Cyber Attack

Over four-fifths (93%) of healthcare organizations surveyed have faced an identity-related security breach in the last two years, according to new research from SailPoint, a pioneer in enterprise identity security. And with many organizations in the healthcare industry understaffed, the sector is more vulnerable than ever before to malicious cybercrime.

SailPoint unveils the findings of a new research report titled, ‘The State of Identity Security 2023: A Spotlight on Healthcare’. The report analyzed data from 150 IT and IT security decision makers from healthcare organizations from a number of countries across the globe and identified the most prevalent risks and roadblocks in the industry’s identity security measures.  

Protecting sensitive data

Most cyber attacks can be attributed to compromised identity, making AI-enabled identity security more vital than ever in protecting sensitive data – for patients, clinicians, and medical infrastructure alike. However, the research revealed that putting this technology into practice is proving more difficult than expected, with almost all organizations (97%) indicating that they have experienced implementation challenges. This included:

• Nearly half citing flexibility in integration (43%) and lack of the right skills to change or implement a solution (42%);
• Nearly two-fifths (39%) referencing regulatory and compliance challenges;
• And nearly one third (30%) suggesting that a lack of senior buy-in and high initial investment (34%) is their biggest challenge.

The research also discovered that the failure to implement this technology has cost the industry greatly, with breaches resulting in the following:

• Operational downtime (43% of organizations who experienced a breach);
• Compromised accounts and/or credentials (41% of breaches);
• Revenue loss (36% of breaches);
• Stolen company data (31% of breaches);
• Reputational damage (26% of breaches).

Access management program

Any and all of these consequences represent a serious problem for healthcare organizations"

Steve Bradford, Senior Vice President EMEA at SailPoint, said: “Any and all of these consequences represent a serious problem for healthcare organizations, with downtime and revenue losses not only impacting the organization’s bottom line but affecting the ability to deliver high-quality patient care.”

The need for identity security within the industry is being acted upon, with almost all respondents (93%) indicating that their organization has either fully or partially implemented an identity and access management program. That said, less than a third of organizations (29%) said that their program has been in place for more than two years, underscoring that most organizations are still in the early stages of identity maturity.

Identity security results

The survey also found that implementing identity security results in the following benefits, among others:

• The ability to connect their identity program to horizontal applications (44%) and vertical applications (42% of organizations);
• A positive impact on brand reputation (44% of organizations);
• Having more control and visibility into users (44% of organizations).

Nearly every healthcare organization recognizes the importance of strong identity security"

Still, there are opportunities to improve, with 96% of respondents agreeing that their organization’s ability to detect and prevent an identity-related security breach needs improvement.

Steve Bradford said, “Nearly every healthcare organization recognizes the importance of strong identity security, and a majority have taken steps to implement full identity and access management solutions—but many of those implementations are still ongoing, leaving organizations vulnerable to attack.”

Identity security programs

He adds, “And while many are enjoying the benefits that identity securing brings to the table, other organizations are being held back from being truly successful with their identity security programs for a range of reasons, such as lack of senior buy-in and lack of skills. The industry’s understanding of and relationship with identity security is still maturing, and healthcare organizations can benefit from support and guidance in the unique challenges they face.”

SailPoint commissioned Vanson Bourne to conduct the research survey. 150 IT and IT security decision makers, from healthcare organizations across the US, UK, Canada, Australia, Brazil, France, Germany and Japan were interviewed in August and September 2022. Respondents were from organizations with 3,000 or more employees.