Healthcare Industry Rates Lowest in Cybersecurity, Report Finds | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Healthcare Industry Rates Lowest in Cybersecurity, Report Finds

May 30, 2014
by Rajiv Leventhal
| Reprints

Of the four critical industries within the Standard & Poor's 500 stock index, healthcare and pharmaceuticals rates lowest when it comes to cybersecurity, according to recent analysis by BitSight Technologies, a Cambridge, Mass.-based security rankings provider.

The report examines the security performance in the finance, retail, utilities, and healthcare and pharmaceutical industries from April 1, 2013 through March 31, 2014. Industry ratings were calculated by using a simple average of the security ratings of companies in that sector.

It was found that the healthcare and pharmaceutical industry experienced the largest increase in the number of security incidents over the observation time. At approximately 5.3 days, the healthcare and pharmaceutical industry also experienced the longest average event duration, meaning the number of days taken to fix security issues. Retail and utilities took approximately 4.2 days, and finance took approximately 3.75 days.

According to the report, the healthcare sector has many of the same characteristics as the retail sector, including a high volume of security incidents and slow response times. While its security rating has increased over the last three quarters, there is still ample room for improvement, the report concluded.

"In our recent assessment of medical devices used in clinics and hospitals around the country, weak encryption, lack of key management, poor authentication and authorization protocols and insecure communications were all common findings," Chandu Ketkar, technical manager at the N.Y.-based Cigital, said in a statement regarding the report. "These gaps in security can lead to a compromise in data confidentiality and integrity. When sensitive data is compromised, it can not only create risks for patients, but also expose healthcare providers and device manufacturers to regulatory and business risks."

Get the latest information on Health IT and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More



Epic Wins Labor Dispute in Closely Divided Supreme Court Decision

Epic Systems Corporation won a major labor-law ruling in the Supreme Court on Monday, centering around the extent of corporations’ right to force employees to sign arbitration agreements, and with a 5-4 ruling in its favor

Survey: Two-Thirds of Physician Practices Seeking Out Value-Based Care Consulting Firms

Most physician organizations are not prepared for the move to value-based care, and 95 percent CIOs of group practices and large clinics state they do not have the information technology or staff in-house needed to transform value-based care end-to-end, according to a recent Black Book Market Research.

Cumberland Consulting Buys LinkEHR, Provider of Epic Help Desk Services

Cumberland Consulting Group, a healthcare consulting and services firm, has acquired LinkEHR, which provides remote application support, including Epic help desk services.

Population Health Tool that Provides City-Level Data Expands to 500 Cities

A data visualization tool that helps city officials understand the health status of their population, called the City Health Dashboard, has now expanded to 500 of the largest cities in the U.S., enabling local leaders to identify and take action around the most pressing health needs in their cities and communities.

Trump will Nominate Acting VA Secretary Wilkie for Permanent Position

Just a day after the Department of Veterans Affairs (VA) and Cerner inked their $10 billion EHR (electronic health record) deal, President Trump said he would be nominating Acting VA Secretary Robert Wilkie for the permanent position.

ONC Names API Server Showdown Stage 2 Winner

The Office of the National Coordinator for Health Information Technology (ONC) has named 1UpHealth as the Stage 2 winner of the “Secure API Server Showdown” challenge.