Evolution of Cybersecurity in Healthcare: Insights from a CIO

Summary

Michelle Leafloor, Vice President of Health Information Technology Services and CIO at Hamilton Health Sciences, discusses the inevitability of cyber threats in healthcare. She emphasizes the importance of improving security posture through vendor collaboration, leveraging AI for advanced monitoring, and enhancing incident response plans beyond technology to include clinical stakeholders. Continuous education to combat phishing and the significance of cross-sector collaboration for sharing best practices and crisis management are highlighted as crucial elements in cybersecurity.

Takeaways

• 🔒 **Cybersecurity is a Continuous Challenge**: Healthcare can't expect a 'never event' in cybersecurity; it's a reality that must be constantly addressed.
• 🤝 **Collaboration with Vendors**: It's crucial to work with all vendors to understand and improve their security measures, which in turn enhances the overall security posture of the organization.
• 💡 **AI's Expanding Role**: Artificial Intelligence is increasingly being utilized in cybersecurity, particularly for detecting unusual patterns and enhancing existing robust tools.
• 🚨 **Incident Response Plans**: There's a need to expand incident response planning beyond just the security team to include clinical stakeholders and create a comprehensive organizational plan.
• 🌐 **Global Learnings**: Learning from global peers and partners is essential to evolve cybersecurity strategies and incident response plans.
• 📚 **Continuous Education**: Educating teams about cybersecurity threats like phishing is vital, even though it's not a complete solution; it helps move towards better security awareness.
• 📈 **Moving the Needle**: It's about continuous improvement in technology, planning, and education to stay ahead in cybersecurity.
• 🤗 **Non-Punitive Approach**: When team members fall for phishing scams, the focus should be on improvement through education rather than punishment.
• 🌉 **Cross-Sector Collaboration**: Collaboration across different sectors can provide unique insights and learnings to strengthen cybersecurity measures.
• 🌟 **Provincial Initiatives**: Initiatives like Ontario's local service delivery groups aim to create standards for incident response and improve cybersecurity across the sector.

Q & A

What is Michelle Leafloor's position at Hamilton Health Sciences?

Michelle Leafloor is the Vice President of Health Information Technology Services and the Chief Information Officer (CIO) at Hamilton Health Sciences.

What is the reality of cybersecurity in healthcare according to Michelle Leafloor?

Michelle Leafloor states that healthcare being a 'never event' in the cyber world is not a reality, implying that cyber threats are a constant concern.

How does Michelle Leafloor describe the role of technology in improving cybersecurity?

She mentions working with all vendors to understand their security measures and how collective tools can improve the organization's security posture.

What is the significance of AI in cybersecurity as per Michelle Leafloor's perspective?

AI is seen as having a great opportunity to evolve robust tools, particularly in detecting unusual patterns that may not currently be identified.

How does Michelle Leafloor view the role of incident response plans in cybersecurity?

She emphasizes the need for organizations to spend enough time and effort on incident response plans, involving not just the security team but also clinical stakeholders.

What recent lessons has Michelle Leafloor learned about incident response?

She has learned that while security teams may have good incident response plans, the focus should also be on how to handle specific scenarios, such as losing a cancer treatment center.

How does Michelle Leafloor approach the issue of human error in cybersecurity?

She acknowledges that most cyber events exploit human error, such as through phishing, and emphasizes the need for continuous education to improve awareness and best practices.

What is the strategy for dealing with employees who fall for phishing attempts, according to Michelle Leafloor?

Instead of punishment, Michelle Leafloor advocates for a little led reminder education to improve security awareness and practices.

What are the three key areas Michelle Leafloor believes need to be advanced in cybersecurity?

The three key areas are technology, planning, and education.

How does Michelle Leafloor view the role of collaboration in cybersecurity?

She sees collaboration as crucial, both within healthcare and across sectors, to share information, learn from each other, and support one another during crises.

What is the initiative by Ontario Health to improve cybersecurity?

Ontario Health has recognized the need for collaboration and has defined local service delivery groups to work with area organizations to create standards for incident response and tooling.