Cybersecurity was identified as an increased business priority over the past year according to 87 percent of respondents in the newly released 2015 HIMSS Cybersecurity Survey. Two-thirds of those surveyed also indicated that their organizations had experienced a significant security incident recently. Released at the Privacy and Security Forum, held in Chicago from June 30-July 1, this research reflects continued cybersecurity concerns by healthcare providers regarding the protection of their organizations’ data assets.
“The recent breaches in the healthcare industry have been a wake-up call that patient and other data are valuable targets and healthcare organizations need a laser focus on cybersecurity threats,” said Lisa Gallagher, Vice President of Technology Solutions, HIMSS. “Healthcare organizations need to rapidly adjust their strategies to defend against cyber-attacks. This means incorporating threat data, and implementing new tools and sophisticated analysis into their security process.”
The survey of 297 healthcare leaders and information security officers across the industry also found that at least half of respondents made improvements to network security, endpoint protection, data loss prevention, disaster recovery and IT continuity. However, despite the protective technologies available, most respondents felt only an average level of confidence in their organizations’ ability to protect their IT infrastructure and data.
Key findings from the survey include the following:
- Respondents use an average of 11 different technologies to secure their environment and more than half of healthcare organizations surveyed hired full time personnel to manage information security
- 42 percent of respondents indicated that there are too many emerging and new threats to track
- More than 50 percent of information security threats are identified by internal security teams
- 59 percent of survey respondents feel the need for cross-sector cyber threat information sharing
- 62 percent of security incidents have resulted in limited disruption of IT systems with limited impact on clinical care and IT operations
- 64 percent of respondents believe a lack of appropriate cybersecurity personnel is a barrier to mitigating cybersecurity events
- 69 percent of respondents indicated that phishing attacks are a motivator for improving the information security environment
- 80 percent use network monitoring to detect and investigate information security incidents
- 87 percent of respondents reported using antivirus/malware tools have been implemented to secure their healthcare organizations’ information security environment
In addition to the findings above, survey respondents found the following as the top ways security incidents were identified and the impact they had on their organizations:
Download the complete 2015 HIMSS Cybersecurity Survey,