SecurityBrief New Zealand logo
Story image

Cloud services top threat vector for healthcare industry

Cloud services represent a multi-million dollar threat vector for the healthcare industry, according to new research from Infoblox.

The research focuses on the cybersecurity and network infrastructure challenges faced by decision-makers in the healthcare industry.

The report reveals major challenges this critical industry faced as healthcare IT workers scrambled to secure protected health information (PHI) and the infrastructure against the COVID-19 pandemic's complex cybersecurity and networking challenges.

Key survey findings include:

Data breaches and network outages are a real and growing cost for the industry: Nearly half (43%) of respondents estimated the costs of data breaches would exceed $2 million and more than one-third (34%) said the same for network outages.

The healthcare industry is a target: More than half of respondents (52%) suffered a data breach in the past year.

Attackers are focusing on the cloud: Cloud vulnerabilities and misconfigurations, IoT attacks and data manipulation are the most expected cyber threats the industry faces in the next 12 months, each cited by nearly 20% of respondents.

Cloud networks remain vulnerable: 53% of respondents experienced data breaches in cloud networks, the biggest attack vector from the past year.

Knowledge is half the battle: Respondents cited network monitoring (71% of respondents) and threat intelligence (61%) as the most effective mitigation tactics against the threats they faced in 2020.

The survey also found that financial losses from network outages tend to be only marginally lower than those from data breaches, demonstrating that losses from normal business interruptions can be as damaging as those from hacks.

Respondents universally recognised that the costs of prevention were lower than the significant direct and indirect costs of these events - for example, fines, equipment replacement, victim remediation, loss of reputation and customer losses.

Infoblox VP of product marketing Anthony James says, "The coronavirus pandemic continues to highlight the unique cybersecurity needs of the healthcare industry, even as it has increased the number of threats these organisations face.

"PHI is both highly prized by cyber criminals and strictly regulated by governments, raising the stakes for the industry as it adapts cloud-first technologies in response to the shutdown's remote work mandate."

James says, "Fortunately, the industry recognises the need and value of prevention when it comes to protecting this critical data and understands that DNS is one of the most cost-effective ways to secure their networks from a variety of malicious threats before they infiltrate the network.”

According to James, healthcare organisations can implement solutions that securely extend a network into the cloud and leverage insights from DNS traffic, as well as other threat intelligence feeds and mitigation tools to provide defense-in-depth for on-premises and remote network architectures.

Cloud-managed network services, such as what Infoblox provides, can enable businesses to simplify network management and automate critical tasks as best suits the team.

The survey is based on responses from nearly 800 healthcare IT decision-makers in North America, Latin America, Europe and the Asia-Pacific region.

Story image
Video: 10 Minute IT Jams - Radware VP on the challenges of cloud security
In this interview, Techday speaks to Radware vice president of technologies Yaniv Hoffman, who discusses the primary challenges facing IT organisations in terms of their cloud security apparatus.More
Story image
Mobile devices biggest enterprise security threat - report
Businesses have left themselves vulnerable and open to cyber criminals in the rush to ensure their workforce could operate remotely during the Covid-19 pandemic.More
Story image
Fortinet: Hyperscaling networks? Hyperscale your security!
Jon McGettigan, Fortinet A/NZ Regional Director, explains why a broad, integrated and automated security fabric is the most effective strategy to protect users, apps and data in a hyperscaling environment.More
Story image
Soft Solutions rolls out new WatchGuard billing system for NZ
"This flexible procurement model builds upon our partner first strategy, supports companies in their cloud transformation and allows them to benefit from increased protection and flexible, scalable IT infrastructure."More
Story image
FortiGuard appoints former cyber warfare officer
Former RAAF cyber warfare officer Mark Robson has been appointed as senior tactical threat analyst in FortiGuard’s managed detection and response team, FortiResponder.More
Story image
Dell Technologies unveils new data protection innovations for hybrid cloud workloads
The Dell EMC PowerProtect Backup Service, powered by Druva, is designed to deliver SaaS app protection without increasing IT complexity.More