Page 65 - Cyber Warnings

spot problem staff members or entire processes which pose a risk. This allows proactive
responses which could be the difference between a problem, and a 10-million record breach.
Managing and training staff is tricky within healthcare because the clinical information is
necessary for the health of patients. Doctors and nurses cannot be restricted from health
information, but should not have access to financial payment information. There must be a
certain level of trust between the staff and IT that comes from training and smart implementation
of technology.

Monitoring should go hand-in-hand with identity management, with full access rights
management process for all users that includes where they work, who they are, and the exact
rights they should use in their daily work. New users should be on boarded within such a
structure, where their user rights are clearly delineated before they start the job.

Moving Forward
Technology tools such as advanced user monitoring provide visibility and accountability, and
when combined with training they provide organizations with a layer of breach protection. While
no solution makes the organization immune to threats, the right approach can make the
healthcare provider a much less appealing target and provides IT the chance to stop small
breaches before they spiral out of control.

The trend of healthcare breaches continues year-over-year, with a Gartner analyst predicting
every person in the country will have their health information hacked by 2024 (if not sooner).
Healthcare industry organizations can limit the scope of such incidences by employing the two-
pronged approach of training and technology to introduce control and visibility into data access.

About the Author
Kurt Long is the Founder and CEO of FairWarning®, whose Patient Privacy Intelligence
customers represent over 8,000 healthcare facilities globally, and protects financial services
customers with over $500 Billion in assets. Prior to FairWarning®, Mr. Long founded and served
as CEO of OpenNetwork Technologies a leader in web single sign on and identity management
software solutions. As CEO, Mr. Long led OpenNetwork to over 2,000% growth with customers
across the United States, United Kingdom, Europe and Australia. OpenNetwork was acquired
by BMC Software of Houston.

http://www.fairwarning.com/
https://www.linkedin.com/in/kurt-long-8223211/
https://twitter.com/FairWarningInc

Its customers include the FBI, the US Air Force, the United Nations and Barclays — each of
which rely on IS Decisions to prevent security breaches; ensure compliance with major
regulations; such as SOX and FISMA; quickly respond to IT emergencies; and save time and
money for the IT department.

65 Cyber Warnings E-Magazine – June 2017 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide