The adoption of a cybersecurity framework in a healthcare, surgical and oncological environment: Synergy-net a Campania FESR-POR (European Fund of Regional Development-Regional Operative Program) research project

Abstract

Author(s): Domenico Parmeggiani, Giancarlo Moccia, Francesco Torelli, Francesco Miele, Pasquale Luongo, Pasquale Sperlongano, Alfredo Allaria, Antonella Sciarra, Nadia De Falco, Maddalena Donnarumma, Chiara Colonnese, Paola Bassi and Massimo Agresti

As with any other sector, the healthcare industry is also prone to cyber threats. Though the nature of threats is similar to any other industries, it does need to address sector-specifics risks along with security risks in its operating environments. Every day the Hospitals need to ensure that the information is adequately secured. Currently Chief Information Officer (CIOs) and Chief Information Security Officer (CISOs) are trying to protect their hospital Information Systems (IS) departments from security threats. It’s imperative to take necessary measures to ensure risk management and business continuity. The paper addresses some of the challenges faced by healthcare organizations in the selection of a cyber-security framework by reviewing some of the common standards and frameworks that are used by healthcare organizations. The also paper highlights the advantages and disadvantages of each of the standards as: international organization for standardization (ISO)/IEC 27799, Health Insurance Portability and Accountability Act (HIPAA), HITRUST, Nation Institute of Standards and Technology (NIST) has developed the Cyber Security Framework (CSF) and General Data Protection Regulation (GDPR) and compare and the additional directives provided by this standards.

Share this article