\n<\/p>\n
Experts said healthcare providers must look beyond preventing cyberattacks and strengthen their ability to detect and contain breaches.\u00a0<\/p>\n
“Cybersecurity awareness is necessary, but it is no longer sufficient on its own,” said Assoc Prof Razwana.\u00a0<\/p>\n
What matters is whether organisations have implemented effective controls and can demonstrate they work, she added.\u00a0<\/p>\n
Mr Kay similarly stressed the importance of containing intrusions before attackers can spread through an organisation\u2019s systems.\u00a0<\/p>\n
“The decisive factor is not whether an attacker gets in, but how quickly the organisation can contain them once they do,” he said.\u00a0<\/p>\n
Experts said healthcare providers should assess their suppliers\u2019 security themselves, limit vendors\u2019 access to only what they need, and require them to report breaches promptly.<\/p>\n
\u201cOutsourcing a service does not remove the need to understand what data a supplier holds, who can access it and how an incident will be detected and contained,\u201d said Prof Wang.<\/p>\n
Other priorities include strong authentication, prompt remediation of known vulnerabilities, tighter controls over administrator and vendor access, and network segmentation to limit the spread of attacks.\u00a0<\/p>\n
Organisations should also monitor for suspicious activity, including unusual access patterns and large data transfers, Prof Wang added.<\/p>\n
AI can also help defenders review code, monitor systems and flag vulnerabilities, said Mr Ali. But he cautioned that such tools are not a \u201csilver bullet\u201d and can introduce new security risks if they are not properly configured and managed.\u00a0<\/span><\/p>\n However, Assoc Prof Razwana said cybersecurity preparedness is unlikely to be uniform across the healthcare sector.\u00a0<\/p>\n While larger private healthcare groups may have dedicated cybersecurity teams and greater resources to invest in protective technologies, smaller clinics and independent providers may face tighter budgets and limited access to technical expertise.\u00a0<\/p>\n They often depend heavily on external vendors to manage their IT systems, making the security of those providers particularly important, said Assoc Prof Razwana.\u00a0<\/p>\n Heavy reliance on common service providers can also create concentration risk, she said, as a compromise at one widely used provider could potentially affect several healthcare organisations.\u00a0\u00a0<\/span><\/p>\n In response to CNA\u2019s queries, Raffles Medical Group chief technology officer Terence Foo said it regularly reviews and strengthens its cybersecurity practices in line with the evolving landscape.\u00a0<\/p>\n These efforts include ongoing assessments of the system security, risk management and disruption preparedness, as well as working closely with technology partners and vendors.<\/p>\n “While we do not comment on specific measures, monitoring activities or threat assessments for security reasons, we remain attentive to risks and continue to take a risk-based approach on cybersecurity,” he said.\u00a0<\/p>\n “We are committed to protecting patient information and maintaining business continuity to support the safe and continued delivery of essential healthcare services.”<\/p>\n But even with such safeguards in place, no organisation can guarantee complete protection against cyberattacks, said experts.\u00a0<\/p>\n Assoc Prof Razwana said the more realistic objective is to make successful intrusions harder, limit their impact and ensure that essential healthcare services can continue even when systems are compromised.\u00a0<\/p>\n “The focus is not just about securing data,\u201d she added. \u201cIt is about protecting patient trust, maintaining continuity of care and safeguarding patient safety.”<\/p>\n<\/div>\n
\n
\n
Read Full Article At Source <\/a>
\n