ECRI, however, says greater efforts by manufacturers are underway to ensure devices are secure and protected from cyber threats such as ransomware.

“When ECRI Institute interacts with our customers, most, if not all, are planning for various different activities to address security threats and ensure sufficient preparedness in case a security incident does occur,” said Leinonen. “The same can be said for many medical device manufacturers who are actively boosting their security efforts to meet the demand for more secure connected medical devices.”

The main challenges, he says, that hinder efficient cyber protection are healthcare facilities trying to balance numerous priorities at once and a lack of security professionals.

While he and ECRI suggest a number of tips, including facilitating sufficient funding for cybersecurity initiatives, establishing a comprehensive incident response plan, and conducting personnel training to increase security awareness, the task of combating cybersecurity threats lies with all parties.

“Cybersecurity in a healthcare facility should be thought of as a responsibility for all and not solely an IT issue,” he said. “Furthermore, with the increased reliance on device connectivity and centralized data systems to deliver patient care, cybersecurity threats like ransomware have become a patient safety issue.”

Lloyd’s did not respond for comment.

Back to HCB News

Health IT Homepage