A recent Healthcare Edition of the 2016 Vormetric Data Threat Report (DTR) observed that despite feeling vulnerable to data threats, IT security leaders are prioritizing and focusing more on Compliance. 96% are already bracing for an attack on the personal information, and almost 63% of them experienced a past data breach, with nearly one in five indicating a breach in the last year.

On a positive note, 60% are raising their budgets and spending to better defend against such attacks. But the most interesting aspect was their top IT security spending priorities:

• Meeting Compliance Requirements (61%)
• Reputation and brand (49%)
• Preventing data breaches (40%)
• Implementing security best practices (46%)

But why did 69% of US healthcare respondents acknowledge “being compliant” as the only effective way to protect sensitive data – despite the fact that slow moving compliance standards consistently failed to stop today’s multi-phase attacks.

“Compliance is only a step towards Healthcare IT security,” said Garrett Bekker, senior analyst, information security at 451 Research and the author of the report. “As we learned from data theft incidents at healthcare organizations that were reportedly HIPAA compliant, being compliant doesn’t necessarily mean you won’t be breached and have your sensitive data stolen.”

Healthcare Industry: A Prime Target for Cyber-Criminals

Healthcare breached records sell for hundreds of dollars, it’s no wonder healthcare professionals feel they are in a cybercriminal’s crosshairs. So how do IT security professionals rate various layers of security mechanisms for defending against these threats:

• 79% rated network defenses as ’very’ or ‘extremely’ effective at protecting data
• 64% rated endpoint and mobile defenses

“With the boom in black market sales of healthcare data, the potential for financial harm to patients’ privacy and security from inadequately protected data is growing fast,” said Tina Stewart, vice president of marketing for Vormetric. “Yet compliance requirements that can’t completely safeguard data continue to be the driver for healthcare industry IT security practices. For healthcare organizations, they now have to prioritize the safety of patient data and privacy as part of patient care, and realize that meeting compliance requirements are only a start.”

So how does an Information Vulnerability Risk Management Software works?

 

Source: Tara Seals US/North America News Reporter, Infosecurity Magazine

Remain up-to-date on industry news / updates through our  Twitter & Linkedin profiles.