Consultation

Sector

Healthcare

When systems go down, care has to continue.

In a hospital the outage plan is a paper process. If it has not been rehearsed this year, you do not have one.

The context

Healthcare is a favourite ransomware target and depends on many intermediaries. We prepare clinical and technical teams to work in degraded mode and to restore essential systems quickly.

Ransomware

Patient records, imaging and prescriptions become unavailable within minutes, with a direct effect on care rather than only on business. This is what sets healthcare apart from other sectors: every minute of downtime has a face attached to it.

Critical intermediaries

Billing, pharmacy and labs often depend on a small number of intermediaries shared across the whole sector, as the Change Healthcare incident showed. Losing just one of them can stall thousands of facilities at once.

Sensitive data

Health information requires stronger protection, because its sensitivity and its value to attackers exceed those of most other personal data. Once disclosed, it cannot be changed the way a password can.

Key frameworks

  • NIS2
  • HIPAA
  • Law 25 (Quebec)
  • GDPR
  • ISO 27001

Read these first

Other sectors

All sectors