Health IT, Hospitals

Imprivata CIO drives home cybersecurity risks for hospitals and what they can do to minimize them

Imprivata CIO Aaron Miri called attention to cybersecurity risks hospitals face and ways they can reduce medical errors with biometrics.

Aaron Miri, Imprivata CIO

Aaron Miri, Imprivata CIO talking at Health Datapalooza 2017

It’s not surprising that at a conference devoted to healthcare data, cybersecurity would be part of the conversation. But what was interesting at Health Datapalooza this year was just how deep that conversation can go.

Aaron Miri, the CIO of health IT security business Imprivata, previously served as CIO of Walnut Hill Medical Center in Texas and CTO of Children’s Hospital in Dallas-Fort Worth in another life. He used specific examples to underscore the high risk

He recounted a time when the Children’s hospital received a shipment of connected medical cabinets and found they contained malware. It wasn’t a breach of security at the hospital, but they arrived like that from the manufacturer.

“This is the day to day reality of what’s happening in hospitals — the unknown factor, the unknown variable. What keeps hospital CIOs from immediately [crossing] the digital divide is fear of the unknown…This kind of variation occurs because of a lack of standards and rules of the road that everybody plays by.”

Miri also emphasized the need for hospitals to be vigilant about encryption and ensuring that patient data is protected and tapped his inner Trekki to drive home his point:”

“Resistance is futile — for data at rest and in transit, encryption is not optional.”

presented by

Citing a stat from The Advisory Board, Miri said only 33 percent of healthcare organizations in the U.S. said they have adequate defenses to thwart a breach.

The enormous issue of patient misidentification as a cause of patient error led Miri to the topic of biometrics. He noted that patient misidentification was the cause of 29 percent of medication management errors and 27 percent of radiation errors, and costs each medical institution an average of $1.2 million each year. The issue dovetails with security because it can also be used for authentication of hospital staff, which could be of interest to add an extra layer of protection for electronic medical record access.

IMG_0495

He highlighted a few ways healthcare organizations have been able to significantly lower incidences of medical errors or near misses using biometrics, particularly palm prints and iris scans.

Photo: Jay_Zynism, Getty Images