Cyberattacks and data breaches have become increasingly common across the healthcare industry as systems and the world at large become more reliant on digital and cloud-based technologies for every aspect of facility operations.
Beth McCarthy, MSN, RN, an administrator at Advanced Surgical Institute in Sewell, N.J., recently joined Becker’s to discuss how her ASC is approaching cybersecurity.
Editor’s note: This response has been lightly edited for clarity and length.
Question: How is your ASC approaching cybersecurity as healthcare transitions into a more cloud-based environment?
BM: ASI feels extremely safe when it comes to cybersecurity. We are part of a larger health system and we use that health system for our IT. No one can access the center or network without that health system’s permission. They monitor the network 24/7.
All staff are educated upon hire and annually regarding HIPAA and cybersecurity, which includes drills, discussions at quarterly meetings on the importance of phishing emails and spot checks to ensure compliance (people are logged off, have screen protectors in place, the recycle bins have been emptied). Employees are encouraged to use strong passwords, including multi-factor authentication.
We keep up on the latest software to ensure we have the most current versions.
All employees have background checks completed and the OIG website is checked monthly. All employees sign non-disclosures and confidentiality agreements upon hire. Once an employee is terminated, their access is disabled.
We have two networks set up for the wireless access points — one is for private use (i.e., the center) and the other is for guests.
We also have an independent company perform an annual IT risk assessment to be sure we are up to date with the latest software against cybersecurity and compliance in all areas.
The post How this ASC is managing cybersecurity in a cloud-based world appeared first on Becker’s ASC.
