Mar 07, 2023 – The Hacker News: Digital Identity / Healthcare
Investing in digital identity can improve security, increase clinical productivity, and boost healthcare’s bottom line. — by Gus Malezis, CEO of Imprivata
Digitalization has created immeasurable opportunities for businesses over the past two decades. But the growth of hybrid work and expansion of Internet of Things (IoT) has outpaced traditional ‘castle and moat’ cybersecurity, introducing unprecedented vulnerabilities, especially in the healthcare industry. Although all organizations have important data to secure, healthcare holds some of the public’s most sensitive personal health information (PHI) – not to mention insurance and financial data, as well. We all expect this information to be secured and protected, especially with HIPAA laws in place. However, due to increasing IT fragmentation and the growing sophistication of cyberattacks, this is no longer guaranteed. In fact, the number of individuals affected by health data breaches in the U.S. since 2009 is greater than the U.S. population of just over 330 million, according to HIPAA. It’s clear that legacy methods to protect PHI aren’t up to par.
Today’s healthcare organizations need to prioritize a strategy focused on securing the user (the digital identity) and their credentials, not the environment. The benefits of digital identity for your bottom line We all understand the concept of insurance in our personal lives and pay those premiums to ensure coverage if tragedy strikes. We don’t view insurance to be the sole layer of protection, and indeed we consider prerequisites such as good knowledge, training, preparation and accreditation (where applicable) as basic investments. Insurance offers the final layer of protection. The same must hold true for the organizations responsible for protecting PHI and other sensitive data. That’s where cyber insurance becomes essential; however, without a sound digital identity strategy in place, the likelihood of qualifying is low (if not impossible). Many underwriters require organizations to go through an in-depth vetting process to ensure they have robust solutions to control and monitor the access of users across their systems. This means less risk for the organization, and less risk for them. It also means less expensive premiums, which skyrocketed by 26.8% in 2022.
Digital identity is the key to meeting these requirements. Implementing a holistic strategy can effectively reduce the cost of the premium and the long-term risk of a cyberattack or breach – putting more savings towards your bottom line and patient care. Investing in digital identity is an investment in healthcare systems and patients. Establishing a digital identity strategy is an investment, but it’s one that is prudent, practical, and necessary for future-proofing your infrastructure. It provides a myriad of security, compliance, and privacy benefits that clinicians, security teams, and patients experience every day. From a clinical perspective, digital identity makes accessing technology completely transparent – invisible even. Tools like no click access single sign-on can streamline logins and authentication processes to all applications, systems, and data, whether on-prem or in the cloud, to give back more time for patient care and reduce time spent with technology. IT teams also experience workflow improvements with digital identity, as it secures credentials and improves the compliance and security posture. And from a patient perspective, digital identity means better protection of PHI, and more meaningful time spent focused on care.
With that in mind, implementing a comprehensive strategy can be daunting for those with fragmented IT environments and countless users and roles that change daily. To get started, healthcare organizations should:
• Assess and consolidate their tech stack.
• Automate user account provisioning and de-provisioning.
• Implement multifactor authentication (MFA).
• Give users a password-less experience.
• Practice the principle of least privilege.
As healthcare organizations adapt to a new normal of IT security, it’s essential to implement a digital identity strategy. With insurance requirements becoming more costly and stringent, and cyberattacks more threatening, digital identity is the key to future-proofing healthcare digitalization. It ticks the box for several cyber insurance and federal compliance requirements, in addition to following zero trust principles. Between strained budgets and escalating cyber risks, digital identity can reduce risk while improving compliance, streamlining user access, and bolstering security. Given the frequency and severity of today’s cyberattacks, the next one is a matter of if, not when. It’s time for healthcare to save more by proactively investing in digital identity.
In conclusion, investing in digital identity is essential for healthcare organizations to protect PHI and other sensitive data, meet stringent cyber insurance requirements, and reduce the cost of premiums. It can improve security, increase clinical productivity, and boost healthcare’s bottom line. A digital identity strategy can automate operational processes, streamline user access, and provide better protection of PHI. Implementing a comprehensive strategy can be daunting, but healthcare organizations should assess and consolidate their tech stack, automate user account provisioning and de-provisioning, implement multifactor authentication (MFA), give users a password-less experience, and practice the principle of least privilege.