• CAPABILITIES
    • Col – 1
      • Care DeliverySCP Health - Care Delivery

        Innovative care models revitalize organizations and improve quality.

      • Clinical StaffingSCP Health - Clinical Staffing

        Support beyond traditional recruiting and staffing to include onboarding, credentialing, and clinician growth and development.

      • Clinical Workforce OptimizationSCP Health - Clinical Workforce Optimization

        Staff, engage, and optimize clinicians and clinical operations.

    • Col – 2
      • Documentation & Revenue Cycle ManagementSCP Health - Documentation & Revenue Cycle

        Proven strategies that maximize revenue opportunities while reducing administrative burden.

      • Virtual HealthSCP Health - Virtual Health

        Leverage technology to expand coverage & support both in and outside of the hospital.

    • Col – 3
      • Advanced Care in the HomeSCP Health - Advanced Care in the Home

        An extension of your health system, bringing high-quality, acute patient care into the home.

      • Clinical IntegrationSCP Health - Clinical Integration

        Solutions to align and integrate processes and understanding across departments.

  • SPECIALTIES
    • Col – 1
      • Emergency MedicineSCP Health - Emergency Medicine

        Scalable approaches that prioritize acute patient care while achieving strategic goals.

      • Critical Care MedicineSCP Health - Critical Care Medicine

        Intensivist staffing and management, leveraging technology for quality care.

      • Hospital MedicineSCP Health - Hospital Medicine

        Streamlined management and virtual care solutions to maximize efficiency.

    • Col – 2
      • Urgent CareSCP Health - Urgent Care

        Technology & tools to plan, staff, and manage profitable urgent care centers.

      • Primary CareSCP Health - Primary Care

        Patient-centric approach to make integrated, accessible health care available to communities.

      • Retail HealthSCP Health - Retail Health

        Reduce administrative and staffing burdens for cost-effective health centers.

    • Col – 3
      • Patient EngagementSCP Health - Patient Engagement

        Grow your patient base with brand recognition and direct-to-employer marketing.

      • Telehealth & TelemedicineSCP Health - Telehealth

        Extend quality, cost-effective, compliant, and specialized virtual care.

  • COMPANY
    • Company
    • Partner With Us
    • Leadership
    • Technology
    • Sustainability
  • CAREERS
    • Clinical Careers
    • Corporate Careers
  • NEWS & RESOURCES
    • Resources
    • Blog
    • Company News
    • Events
    • Virtual Briefing Center
SCP HealthSCP Health
  • CAPABILITIES
    • Col – 1
      • Care DeliverySCP Health - Care Delivery

        Innovative care models revitalize organizations and improve quality.

      • Clinical StaffingSCP Health - Clinical Staffing

        Support beyond traditional recruiting and staffing to include onboarding, credentialing, and clinician growth and development.

      • Clinical Workforce OptimizationSCP Health - Clinical Workforce Optimization

        Staff, engage, and optimize clinicians and clinical operations.

    • Col – 2
      • Documentation & Revenue Cycle ManagementSCP Health - Documentation & Revenue Cycle

        Proven strategies that maximize revenue opportunities while reducing administrative burden.

      • Virtual HealthSCP Health - Virtual Health

        Leverage technology to expand coverage & support both in and outside of the hospital.

    • Col – 3
      • Advanced Care in the HomeSCP Health - Advanced Care in the Home

        An extension of your health system, bringing high-quality, acute patient care into the home.

      • Clinical IntegrationSCP Health - Clinical Integration

        Solutions to align and integrate processes and understanding across departments.

  • SPECIALTIES
    • Col – 1
      • Emergency MedicineSCP Health - Emergency Medicine

        Scalable approaches that prioritize acute patient care while achieving strategic goals.

      • Critical Care MedicineSCP Health - Critical Care Medicine

        Intensivist staffing and management, leveraging technology for quality care.

      • Hospital MedicineSCP Health - Hospital Medicine

        Streamlined management and virtual care solutions to maximize efficiency.

    • Col – 2
      • Urgent CareSCP Health - Urgent Care

        Technology & tools to plan, staff, and manage profitable urgent care centers.

      • Primary CareSCP Health - Primary Care

        Patient-centric approach to make integrated, accessible health care available to communities.

      • Retail HealthSCP Health - Retail Health

        Reduce administrative and staffing burdens for cost-effective health centers.

    • Col – 3
      • Patient EngagementSCP Health - Patient Engagement

        Grow your patient base with brand recognition and direct-to-employer marketing.

      • Telehealth & TelemedicineSCP Health - Telehealth

        Extend quality, cost-effective, compliant, and specialized virtual care.

  • COMPANY
    • Company
    • Partner With Us
    • Leadership
    • Technology
    • Sustainability
  • CAREERS
    • Clinical Careers
    • Corporate Careers
  • NEWS & RESOURCES
    Featured
    The No Surprises Act… FULL of surprises!
    Patient Billing
    • Resources
    • Blog
    • Company News
    • Events
    • Virtual Briefing Center
Contact
Stethoscope

11 Ways to Protect Your Hospital from Cyber-Attack

Download Resource
  • Share

When health care providers think of viruses, it’s rarely in a digital context. That doesn’t make computer viruses any less harmful. Unfortunately, given the rise of cyberattacks on health care systems, it’s no longer “if” your system will suffer an attack, but “when.” Utilize this checklist when evaluating your hospital’s cybersecurity efforts.

1. Establish a Security Culture

Frequent, ongoing education and training can help raise people’s awareness about threats and vulnerabilities that can jeopardize the information they work with on a daily basis. Hospitals must instill a security culture among staff to the point that it becomes as second nature as maintaining sanitary practices.

2. Protect Mobile Devices

It is imperative employees take care to prevent data loss, either as a result of unauthorized viewing, unsecured wireless transmission, or stolen devices.

3. Maintain Good Computer Habits

IT staff must be careful to configure and maintain computer hardware and software to the degree that it’s safe from harm. This includes removing any software that is not mission-critical, updating software to the latest versions, and performing routine maintenance.

4. Use a Firewall

Unless a facility disconnects its EHR system from the Internet entirely, there should be a firewall surrounding it to protect against intrusions and threats from outside sources.

5. Install and Maintain Antivirus Software

Just as a firewall protects a network from intrusion, antivirus software detects and destroys malware. The anti-virus software can be thought of as infection control while the firewall has the role of disease prevention.

6. Plan for the Unexpected

Two ways to protect against loss are by creating backups and having a recovery plan. Creating backups should be a daily or weekly routine. Recovery planning is necessary. So when an emergency occurs, data restoration can take place quicker and more efficiently, following a prescribed process.

7. Control Access to Protected Health Information

Not every staff member needs the same level of access to sensitive information. Set permissions to restrict access using an “access control system” to assign user rights and permissions.

8. Use Strong Passwords and Change Them Regularly

Passwords are the first line of defense in preventing unauthorized access. A strong password could slow a hacker down long enough to discourage further attempts. Strong passwords consist of at least eight characters (the longer, the better), a combination of upper case and lower case letters, one number, and at least one special character, such as a punctuation mark.

9. Limit Network Access

The increase in cyberattacks means that the days of BYOD (bring your own device) to work are over. If not, it certainly means the hospital should not allow personal devices to access its network. Also, don’t allow staff to download softwares without explicit permission and oversight by IT staff.

10. Control Physical Access

The most common way electronic PHI is compromised is through the loss of devices, including portable storage media (e.g., thumb or flash drives, CDs, or DVDs), laptops, handhelds, desktop computers, and even hard drives taken out of machines, lost and stolen backup tapes, and entire network servers.

Securing devices physically is a matter of grave importance. This includes storing them in locked rooms, managing physical keys, and restricting staff’s ability to remove devices from a secure area.

11. Implement a Tiered Approach

A tiered approach is a must for any technologist focused on securing a given environment. Long gone are the days where one security point product or appliance will meet all of the different security challenges hospitals are exposed to. Deploying multilayer firewalls or spam filters at the network edge and using multiple vendors can help reduce vulnerability.

 

While there is no way to keep cyberattacks from happening, following these 11 steps can help make your network safer and help protect medical records and other sensitive information.

And if there is one other recommendation hospitals should heed, it’s to take action now and not wait until after a security breach occurs.

Related Topics
  • Care Delivery
  • Communication
  • Community Relationships
  • Culture and Teamwork
  • Data and Analytics
  • Hospital Medicine
  • Operational Advancement
  • Patient Satisfaction
  • Sustainability
  • Technology and Innovation
  • Virtual Health

Relevant ResourcesView All

‘Think with Your Ink:’ 4 Reasons Why Proper Medical Record Documentation Is Vital

New Requirements for Clinical Technology Innovation — Mobile and Secure from Recruitment to Retention

SCP Health's Innovation and Technology
Guide

Daily Habits to Preserve Your Practice

Guide

3 Ways to Use Technology for Growth

PREVIOUS ARTICLE
‘Must Take’ Steps to Thrive Amidst Chaos
NEXT ARTICLE
20 Key Questions to Align Your Emergency Medicine and Hospital Medicine Teams
SCP Health

SCP Health. All Rights Reserved.

200 Galleria Parkway SE
Suite 1300
Atlanta, GA 30339

  • Terms of Use
  • Privacy Policy
CAPABILITIES
  • Care Delivery
  • Clinical Staffing
  • Clinical Workforce Optimization
  • Documentation and Revenue Cycle Management
  • Virtual Health
  • Advanced Care in the Home
  • Clinical Integration
SPECIALTIES
  • Emergency Medicine
  • Hospital Medicine
  • Critical Care Medicine
  • Urgent Care
  • Primary Care
  • Retail Health
  • Patient Engagement
  • Telehealth & Telemedicine
COMPANY
  • Company
  • Partner With Us
  • Leadership
  • Advanced Health Care Technology
  • Sustainability
  • Corporate Compliance
CAREERS
  • Clinical Careers
  • Corporate Careers
  • Provider Portal
RESOURCES
  • Resources
  • Blog
  • Company News
  • Events
  • Virtual Briefing Center

Also of Interest
  • Clinical Workforce Optimization
  • Engaging, Activating, and Optimizing Your Clinicians
  • Care Delivery Solutions