Page 119 - Cyber Defense eMagazine September 2023

Imprivata – Digital Identity Maturity Model & Assessment for Healthcare IT Security

Given the immense value of sensitive patient records and the potentially life-threatening consequences
for patient care, healthcare organizations have become prime targets for malicious actors. Many
healthcare delivery organizations (HDOs) have identified a lack of thorough assessment of cybersecurity
risks as the most significant obstacle to establishing a robust security stance.

Imprivata is dedicated to transforming this landscape by assisting organizations in prioritizing strategies
that revolve around securing the user's digital identity and credentials, moving away from the
conventional emphasis on network perimeters.

In April 2023, Imprivata introduced the Imprivata Digital Identity Maturity Model and Digital Identity
Maturity Assessment. These pioneering tools are designed to elevate the input of clinicians and end-
users in shaping the decision-making process concerning a healthcare organization's digital identity
strategy. Integrating the clinician's perspective into a digital identity strategy assessment will result in
more valuable, efficient, and successful implementations. This, in turn, enhances the collaboration
between clinicians and IT teams, ultimately leading to improved outcomes.

Palo Alto Networks – Medical IoT Security

Digital devices are extensively utilized in the healthcare sector, particularly for diagnostics and
monitoring, encompassing equipment in ambulances and surgical robots. However, research from Unit
42, Palo Alto Networks' division specializing in threat intelligence and consulting, reveals that nearly 98%
of all medical IoT device traffic lacks encryption. Furthermore, 57% of IoT devices face susceptibility to
medium or high-severity attacks. This concerning data underscores the allure of security device targeting
for cyber attackers, potentially jeopardizing patient data and ultimately putting patient well-being at risk.

In response, Palo Alto Networks announced enhanced features and capabilities in December 2022,
tailored to safeguard medical Internet-of-Things (IoT) devices from cyber threats. This initiative takes the
form of "Medical IoT Security," a comprehensive Zero Trust security solution specifically designed for the
digital healthcare landscape.

Palo Alto Networks' novel Medical IoT Security solution harnesses the power of machine learning to
facilitate swift and secure deployment and management of emerging connected technologies within
organizations. This solution integrates with existing healthcare information management systems such
as AIMS and Epic Systems, streamlining workflows through automation. Users can devise device rules
equipped with automated security responses, enabling functions like anomaly monitoring and triggering
appropriate countermeasures.
The health IT security market is witnessing remarkable growth, fueled by escalating cybersecurity threats,
regulatory compliance pressures, and advancements in healthcare technologies. Key players in the
market are delivering innovative solutions to address these challenges, ranging from comprehensive
network security to enhanced identity and access management. As the industry continues to evolve,
future trends such as AI-driven threat detection and cloud security will play pivotal roles in shaping the
future of the healthcare cybersecurity landscape.

Cyber Defense eMagazine – September 2023 Edition 119
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.