The Managerial Ethical and Operational Challenges of Hospital Cybersecurity

The Managerial Ethical and Operational Challenges of Hospital Cybersecurity

Darrell Norman Burrell, Sharon L. Burton, Calvin Nobles, Delores Springs, Allison J. Huff, Kim L. Brown-Jackson, Kevin Richardson, Jorja B. Wright, S. Raschid Muller, Angel J. Jones
Copyright: © 2023 |Pages: 15
DOI: 10.4018/979-8-3693-1634-4.ch026
OnDemand:
(Individual Chapters)
Available
$37.50
Current Special Offers
No Current Special Offers
TOTAL SAVINGS: $37.50

Abstract

The COVID-19 pandemic has presented healthcare institutions with unprecedented challenges in maintaining robust cybersecurity practices to safeguard patient data and protect critical healthcare operations. This chapter explores the ethical, organizational cultural, and leadership complexities hospitals face in cybersecurity during and after the pandemic. Ethical considerations encompass patient privacy, informed consent, and the responsible use of emerging technologies. Organizational cultural challenges involve balancing patient care priorities with cybersecurity efforts, fostering a cybersecurity-aware culture, and mitigating insider threats. Drawing insights from real-world experiences and expert opinions, this chapter sheds light on the multifaceted nature of hospital cybersecurity challenges amidst a global crisis. This chapter explores the nature of these challenges through a management consultant hospital intervention in a hospital that has experienced a significant cybersecurity breach.
Chapter Preview
Top

Introduction

The COVID-19 pandemic has intensified hospital cybersecurity's complexities, imposing unprecedented challenges on safeguarding patient data and ensuring uninterrupted healthcare operations (Wang & Alexander, 2021; Pranggono & Arabo, 2021). From rapidly shifting priorities and resource reallocation to the escalated threat landscape and expanding attack surfaces, hospitals confront a myriad of cybersecurity challenges (Wang & Alexander, 2021; Pranggono & Arabo, 2021). Moreover, this paper elucidates the imperative for continuous adaptation and collaborative measures to fortify cybersecurity resilience in the face of evolving threats (Wang & Alexander, 2021; Pranggono & Arabo, 2021).

Rapidly Shifting Priorities and Resource Reallocation

The exigencies of the pandemic have compelled hospitals to pivot their focus toward patient care and pandemic management, leading to potential resource reallocation from cybersecurity initiatives (Wang & Alexander, 2021; Pranggono & Arabo, 2021). Balancing immediate priorities while preserving cybersecurity readiness poses a delicate challenge to healthcare institutions.

Escalated Threat Landscape

The pandemic has spurred cybercriminal activities targeting hospitals (Wang & Alexander, 2021; Pranggono & Arabo, 2021). Phishing and social engineering attacks exploiting pandemic-related fears and misinformation have risen significantly. Furthermore, remote work vulnerabilities and telehealth platforms have become attractive targets for cyber adversaries seeking to infiltrate hospital systems.

Expanding Attack Surfaces

The proliferation of connected medical devices and the Internet of Things (IoT) in healthcare has expanded the attack surfaces. With the accelerated adoption of telemedicine services during the pandemic, hospitals face challenges in securing these novel digital channels and managing the associated risks (Wang & Alexander, 2021; Pranggono & Arabo, 2021).

Insider Threats and Human Error

Overwhelmed staff and the rapid shift to remote work have increased the likelihood of human error, inadvertently exposing sensitive data. Additionally, discontented employees may pose insider threats, making detecting and mitigating such risks imperative (Wang & Alexander, 2021; Pranggono & Arabo, 2021).

Post-COVID-19 Challenges

The anticipated post-COVID-19 era presents a unique set of challenges that warrant continued vigilance. Hospitals must address evolving threat landscapes and the potential persistence of ransomware attacks and nation-state cyber espionage targeting healthcare research and data (Wang & Alexander, 2021; Pranggono & Arabo, 2021).

Data Privacy and Compliance

Healthcare institutions must navigate heightened scrutiny regarding patient data privacy (Wang & Alexander, 2021; Pranggono & Arabo, 2021). Adherence to complex regulatory requirements, such as the Health Insurance Portability and Accountability Act (HIPAA) and General Data Protection Regulation (GDPR), poses a formidable challenge.

Resource Allocation and Budget Constraints

Economic ramifications from the pandemic may curtail cybersecurity budgets, necessitating reasonable allocation of resources amidst other pressing needs. Recruitment and retention of skilled cybersecurity professionals amid resource constraints remain a significant concern (Wang & Alexander, 2021; Pranggono & Arabo, 2021).

Complete Chapter List

Search this Book:
Reset