VGM & ASSOCIATESHealthcare MSO

Locking the Digital Door to Risk: Proactive IT and Website Security Strategies to Protect Your Business

Published in Playbook on April 18, 2023

Nick DideriksenBy Nick Dideriksen, Director of Business Technology, VGM Forbin

Protecting your business from an IT and website security standpoint is absolutely crucial. With the increasing number of cyber threats and data breaches, it’s important to take the necessary steps to protect your business from these risks. The risk to any business is simply too large to ignore—and it isn’t a matter of if your company is targeted, but when— especially in healthcare.

Cybersecurity

Understanding Your Risks

The first step in implementing cybersecurity best practices is to understand these risks. Your DMEPOS business collects and transmits sensitive data, such as personal health information and medical history. This data is valuable to cybercriminals, who can use it for identity theft, insurance fraud, and other nefarious purposes.

Balance

Additionally, the devices themselves can be vulnerable to attacks, which can result in the manipulation of medical data, denial of service attacks, or even physical harm to the patient. We know that DMEPOS providers must balance the need for security with the need for accessibility and ease of use. Patient data must be accessible to healthcare providers when and where it is needed, but this must be done in a way that protects the privacy and security of the data.

Hackers

Security Challenges in Healthcare

One of the biggest challenges in cybersecurity in healthcare is the increasing sophistication of cyberattacks. Hackers are developing new and more complex attack methods, and are targeting healthcare organizations for the valuable patient data they hold.

A 2022 report by the cybersecurity company CrowdStrike found that the healthcare sector is the third-most targeted industry for ransomware attacks, with the average ransom payment in the sector increasing by 82% in 2021.1 And a 2022 report by the healthcare cybersecurity company Medigate found that the number of cyberattacks on healthcare organizations increased by 55% from 2020 to 2021.2 The same report found that medical device vulnerabilities increased by 47% in 2021, with many devices still running on outdated software that is no longer supported by the manufacturer.

Ransomware

Another challenge is the increasing complexity of DMEPOS systems, with many connected devices, networks, and software applications. Each of these systems present a potential entry point for cybercriminals, making it difficult to secure the entire system. Many healthcare organizations also have limited resources and budgets for cybersecurity, making it challenging to keep up with the evolving threat landscape. 

Plans for Improvement

Regardless, a 2021 survey by the security company CyberMDX found that 65% of healthcare organizations plan to increase their cybersecurity budgets in the coming year, with many planning to invest in new technologies such as artificial intelligence (AI), machine learning (ML), and blockchain.3

Budgets

These technologies can be used to detect and respond to cyber threats in real time, and can also be used to identify patterns and anomalies in data that may indicate a potential security breach. Blockchain is a distributed ledger technology that provides a secure and transparent way to store and share data. It can be used to store and manage patient data, ensuring that it is secure and only accessible to authorized users.

Getting Started

From a practical and easy place to start, below are two checklists with proactive strategies you can implement to help mitigate this very real risk, as well as ensure compliance with the HIPAA Security Rule.

CYBERSECURITY CHECKLIST 

  • Conduct ongoing risk analysis and assessments
  • Use strong passwords
  • Use multifactor authentication
  • Keep software up to date
  • Use antivirus and anti-malware software
  • Use a firewall
  • Be aware of phishing scams
  • Educate employees on cybersecurity best practices
  • Implement security policies and procedures
  • Encrypt ePHI
  • Limit access to ePHI
  • Monitor and audit activity

WEBSITE SECURITY CHECKLIST

  • Secure your website
  • Use SSL encryption
  • Implement access controls
  • Encrypt stored data
  • Regularly update software
  • Conduct security risk assessments
  • Use alt tags for images
  • Ensure your website is keyboard accessible

Improved Security Improves Patient Care

Cybersecurity is a critical issue and risk to your business that will only become more important in the future. The increasing adoption of telemedicine and remote patient monitoring, integrated systems, and medical devices, along with the increasing sophistication of cyberattacks, present significant challenges to DMEPOS businesses. 

Together, we can create a more secure and resilient system that protects patient data and improves patient care

Together, we can create a more secure and resilient system that protects patient data and improves patient care.

References

  1. “2022 Global Threat Report.” CrowdStrike; 2022. Accessed February 2023. https://www.crowdstrike.com/global-threat-report/.
  2. “Healthcare IoT Security 2022 Moving beyond Device Visibility Segment Insights.” Medigate; 2022. Accessed February 2023. https://www.medigate.io/wp-content/uploads/2022/07/KLAS-2022-Segment-Report-Brief.pdf.
  3. “Perspectives in Healthcare Security.” CyberMDX and Philips; 2021. Accessed February 2023. https://www.forescout.com/perspectives-in-healthcare-securityreport/. 

READ THE FULL ARTICLE HERE

https://www.vgm.com/playbook/canada/?utm_source=blog&utm_medium=website&utm_campaign=playbook2023q2This article was originally featured in the VGM Playbook: Safeguarding Your Future in DMEPOS. To read the full article and more like this, download your copy of the playbook today! 

TAGS

  1. cybersecurity
  2. dmepos
  3. playbook
  4. vgm

Get Connected

Stay up-to-date on the latest resources and news provided by VGM & Associates.

Sign Up for Email

From Our Experts

How to Navigate Supply Chain Issues thumbnail How to Navigate Supply Chain Issues The DMEPOS supply chain was significantly disrupted by the COVID-19 pandemic, and the industry is gradually making its way back to a more typical state. Nevertheless, certain procedures that were developed out of necessity during the pandemic's onset and peak have evolved into effective best practices. One of the most crucial lessons learned is the importance of close collaboration between providers and their trusted vendors, manufacturers, or distributors to ensure success. Protecting Your Business With Viable and Sustainable Payer Contracts thumbnail Protecting Your Business With Viable and Sustainable Payer Contracts Read how to protect your durable medical equipment, prosthetic, orthotic, and supplies (DMEPOS) business by ensuring that you have payer contracts that have long-term viability, as this is one of the most important factors in determining whether your company ultimately succeeds or fails. Assessing Retail Operations: How Retail Can Protect Your Business thumbnail Assessing Retail Operations: How Retail Can Protect Your Business In today's world of healthcare, it goes without saying that DMEPOS businesses are looking for new ways to protect the business's bottom line in order to safeguard their future. Providers should strongly consider how they maximize reimbursement and cash sales by expanding or investing in the retail side of the business. Assessing and Protecting Company Culture thumbnail Assessing and Protecting Company Culture Employers must understand how to assess and protect their organization's culture to ensure it remains a source of competitive advantage. HME Industry Growth, Medicare Advantage, & Competitive Bidding thumbnail HME Industry Growth, Medicare Advantage, & Competitive Bidding Explore key HME industry trends, including DMEPOS growth, Medicare Advantage, competitive bidding, and what providers need to know to stay competitive. Building the Next Generation of O&P Advocates Starts Now thumbnail Building the Next Generation of O&P Advocates Starts Now The future of independent O&P depends on strong advocates. See how OPGA is helping develop future leaders through mentorship, education, and advocacy. State Medicaid Work Requirements: The Impact on Medicaid beneficiaries and their DME Suppliers thumbnail State Medicaid Work Requirements: The Impact on Medicaid beneficiaries and their DME Suppliers Pursuant to the work and community engagement requirements included in H.R.1, the Centers for Medicare & Medicaid Services (CMS) has issued an interim final rule mandating a framework for Medicaid departments to follow when evaluating Medicaid beneficiary eligibility. Beginning no later than January 1, 2027, states must require certain adult Medicaid enrollees to demonstrate at least 80 hours per month of qualifying activity, which may include employment, education, or community... North Carolina Medicaid Rate Floor Extended Through 2029 thumbnail North Carolina Medicaid Rate Floor Extended Through 2029 Earlier this year, it was announced that the North Carolina General Assembly has approved the state budget, securing an additional full two-year extension of the Medicaid fee schedule floor. This protection will now remain in effect until June 30, 2029, guaranteeing that reimbursement rates will continue to be set at 100% of the lesser of the supplier's usual and customary rate or the maximum allowable Medicaid fee-for-service rate.

Be Part of Something Bigger

Become a Member