OR Manager - April 2020 - 15

Safety/Quality
strategic issue, Levy says. Oftentimes
cybersecurity is buried within the IT department
rather than a visible part of an
organization-wide strategy.
Lenny Levy
That mindset is changing
as healthcare facilities
take more steps to
review cybersecurity
measures with board
committees and other
senior leaders on a regular
basis, adds Levy.
" This changing mindset is visible in the
100-plus stakeholders who participated
in HHS' Cybersecurity Act of 2015 Section
405(d) Task Group that created
Health Industry Cybersecurity Practices, "
he says.
Stopping hackers in their tracks involves
a series of dedicated steps on
the part of OR managers, staff, and IT
staff, Lerman says.
When purchasing a device, OR managers
should learn about security measures
and any patient risks associated
with the device, he stresses. " And,
before the device is connected, they
should talk to IT staff to learn how this
device is being properly secured and to
understand the actions being taken. "
Lerman recommends four steps
healthcare professionals should take
when connecting devices to their network:
*
Make sure you have a full inventory
of all devices, including the make,
model, and operating system.
* Do a risk assessment of your devices
and the impact of any vulnerabilities
on patient care.
* Assess what each device is doing
and what medical workflows tie to
each device, and look for any testing
anomalies.
* Apply compensating controls in the
form of segmentation and access
control lists to limit the attack surface.
Make sure devices communicate
only to designated entities.
OR leaders need to know which devices
are in their facilities, understand
www.ormanager.com
potential vulnerabilities, and talk to IT
staff about protections for OR devices.
Ask questions, he emphasizes. " What
types of protections are being used in
the OR? Are OR devices on the same
network as other devices in the hospital?
How easy is it for attackers to access
them? Are patches being applied
regularly, and are they being updated? "
No healthcare facilities are immune
to cybersecurity threats, and the potential
for patient safety risks, loss of productivity,
and impact on the bottom line
make it imperative for OR leaders to
proactively protect their medical devices
and systems. ✥
VISIT THE
OR MANAGER
JOB BOARD
FOR ALL YOUR
EMPLOYMENT
NEEDS!
Jennifer Lubell is a healthcare writer
based in Rockville, Maryland.
References
Cohen J K. Hackensack Meridian pays
hackers after ransomware attack.
Modern Healthcare. December
16, 2019. https://www.modernhealthcare.com/cybersecurity/
hackensack-meridian-pays-hackersafter-ransomware-attack.
Cohen
J K. November-reported healthcare
breaches exposed 570,000
patients' data. Modern Healthcare,
December 11, 2019. https://www.
modernhealthcare.com/cybersecurity/november-reported-healthcarebreaches-exposed-570000-patients-data?utm_source=modernhealthcare-am-thursday&utm_
medium=email&utm_
campaign=20191211&utm_
content=article11-readmore.
US
Department of Health and Human
Services. Office for Civil Rights.
Breach Portal: Notice to the Secretary
of HHS Breach of Unsecured
Protected Health Information.
https://ocrportal.hhs.gov/ocr/
breach/breach_report.jsf.
US Department of Health and Human
Services. Health Industry Cybersecurity
Practices: Managing Threats and
Protecting Patients. https://www.phe.
gov/Preparedness/planning/405d/
Pages/hic-practices.aspx.
Connect with new
employment opportunities
to advance your career
or connect with qualified
candidates for your
facility's latest openings.
You'll find:
* Cutting-Edge Search
Technology
* Extended Job Posting
Options
* Job Alerts
* Anonymous Resume
Posting
* Career Coaching
* Ask the Job Search Expert
* Weekly OR Manager
Careers eLetter
Visit
jobs.ormanager.com
today!
OR Manager
9211 Corporate Blvd, 4th Floor
Rockville, MD 20850
Tel: 1-888-707-5814
clientservices@accessintel.com
www.ormanager.com
28933
28933_ORM Job board ads v2_Third_Vert Ad.indd 1
OR Manager | April 2020 10/20/16 3:15 PM
15

https://www.modern http://www.healthcare.com/cybersecurity/ https://www http://www.modernhealthcare.com/cybersecu http://jobs.ormanager.com https://ocrportal.hhs.gov/ocr/ https://www.phe http://www.ormanager.com http://www.ormanager.com

OR Manager - April 2020

Table of Contents for the Digital Edition of OR Manager - April 2020