The ever growing IoT is making health care more effective and convenient, but at the same time interconneted devices and resources leaves hospitals open to cyber attacks. This is the conclusion of ENISA's latest study "Cyber security and resilience for Smart Hospitals", which investigates threats and vulnerabilities in hospitals using the Internet of Things.
Data protection will remain a key focus for IT security investment in Europe according to the latest annual Computer Weekly/TechTarget IT Priorities survey. The enphasis is still on Cloud with more than 26% of EU businesses planning to invest on Cloud Security and Identity and Access management during 2017.
This is consistent with the fact that cloud-based software as a service is the top deployment model companies plan to use in 2017, in both the UK (57.3%) and across Europe (46.9%).
Thinking cyber attacks will not happen is an outdated mentality in a digital world, however low the risk may be at the current time. Understanding personal responsibility and information governance and security in a digital world is very different from the paper-based world that health and care organisations, among others are moving away from. Being “one step ahead” of the cyber attacks means having secure systems and being trained to handle cyber attacks.
More than £4 billion will be invested as part of the NHS ‘digital transformation' plan.
£1 billion of that will go towards information-security, pegged as a looming problem for the NHS, which handles the medical data of most of the UK population.
£1.8 billion will be used to advance the NHS long awaited transformation to a paperless system.
The recently approved EU General Data Protection Regulation has set a major change in the privacy landscape.
The GDPR will be adopted in the next few days and every organization will need to comply with it by 2018. It will replace the European Data Protection Directive of 1995 and will finally introduce one single law for all 28 EU Member States, with high impact on the digital health market and its security.
M. Azraoui, M. Önen, R. Molva, “Framework for Searchable Encryption with SQL Databases”, Conference CLOSER 2018, 19-21 March 2018, Medeira, Portugal. [Conference website http://closer.scitevents.org/]
J. Alderman, B. R. Curtis, O. Farràs, K. M. Martin, and J. Ribes-González, "Private Outsourced Kriging Interpolation", Lecture Notes in Computer Science, Vol. 10323 (Financial Cryptography and Data Security - FC 2017), pp. 75-90, Nov 2017, ISSN: 0302-9743.
