Monday, 4 May 2015

Defense in Depth: A Requirement for Every Health Organization

THE CIP REPORT C E N T E R F O R I N F R A S T R U C T U R E P R O T E C T I O N AND HOMELAND SECURITY

This month, our authors discuss aspects of security and resilience within the Health Care Sector. After the recent information breach experienced by one of the nation’s major health care organizations, this topic takes on an added relevance. First, Dr. Elivra Beracochea, President and Founder of Realizing Global Health, will discuss the need for health care critical infrastructure protection within the new 2030 development agenda being set by the United Nations General Assembly.

Authors Justin Snair and Matt Deleon then provide an overview of cyber threats against the health care critical infrastructure and related vulnerabilities. Next, Amanda Joyce, Michael Thompson, Andrea LeStarge, and Dr. Nathaniel Evans of Argonne National Laboratory highlight one such vulnerability and present an article on improving cybersecurity response efforts to prevent medical identity theft. Parham Eftekhari and Ryan Kalember, both fellows with the Institute for Critical Infrastructure Technology, describe the concept of “Defense in Depth” as it applies to health care organizations and their data.

In the final article, Amanda Joyce, Michael Thompson, and Dr. Nathaniel Evans discuss mobile medical device usage in the operating room. We would like to take this opportunity to thank this month’s contributors. We truly appreciate your valuable insight. We hope you find this issue of The CIP Report useful and informative. We are thankful for your support and the rich dialogue that follows each topic.

Best Regards,

Director Center for Infrastructure Protection and Homeland Security (CIP/HS)

Critical Infrastructure Protection in Global Health in the 2030 Agenda: What Has Happened Since 2013

In 2013, I wrote an article about the importance of protecting the health infrastructure in developing countries and proposed a roadmap to globally manage health infrastructure and address the impending risks. Sadly, not much has happened since 2013.

Then, a visit to Northern Nigeria had raised my awareness of the lack of infrastructure standards and of maintenance of standard operating procedures (SOPs). At that time, the local governments did not know what needed to be done to maintain and even upgrade their facilities. Lack of mosquito screens on windows and nets on beds, lack of cleaning routines or ways to dispose of broken down equipment, all worsened by lack of functioning restrooms and electricity were the most visible signs of deficient infrastructure in a district health center that served several thousand people (photo 1).

The Labor room also did not meet infrastructure standards. In the photo you can see how in spite of having a sink, they had to use a bucket to wash hands. Also, the walls and floor had not been cleaned in a long time and the bed lacked linen and was not up to standards either (photo 2). The intent of these photos is not to criticize. In fact, the staff were doing the best they could with what they knew. The problem was what they did not know about their infrastructure, about maintenance and SOPs that would have allowed them to deliver quality healthcare. We all get used to our surroundings and stop “seeing” the problems.

The recent Ebola epidemic brought to world attention the fragility of health systems and the inappropriateness of the health infrastructure in West Africa. On the other side of the Atlantic, we also saw how Ebola cases were rapidly detected, treated, and contained by trained staff in appropriate facilities. The main and most striking difference between the two scenarios on both sides of the Atlantic was

Read More Here: http://ift.tt/1OUv9ku



from cyber security caucus http://ift.tt/1R6K09T
via IFTTT

No comments:

Post a Comment