{"id":4495,"date":"2023-01-10T16:49:39","date_gmt":"2023-01-10T16:49:39","guid":{"rendered":"https:\/\/locaterisk.com\/?page_id=4495"},"modified":"2023-01-11T14:39:57","modified_gmt":"2023-01-11T14:39:57","slug":"it-sicherheit-krankenhaeuser","status":"publish","type":"page","link":"https:\/\/locaterisk.com\/en\/it-sicherheit-krankenhaeuser\/","title":{"rendered":"Hospitals & Clinics"},"content":{"rendered":"

IT in Hospitals: More Protection Urgently Needed<\/h1>\n\n\n\n

<\/p>\n\n\n\n

Healthcare data is particularly sensitive and yet in many cases not adequately protected. This was the result of a statistical survey on the IT security of hospitals in Germany by LocateRisk. In addition to existing standards in the healthcare sector, the EU directive NIS2 will place even greater obligations on operators of critical infrastructures from 2023. The new requirements are designed to ensure that patient data in hospitals and other medical facilities is better secured against cyberattacks and data breaches. Among the obligations are timely updates, conducting security audits, cybersecurity training, and measures to improve supply chain security. <\/p>\n\n\n\n

<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n

IT Security from an External Perspective: Hospitals in Germany<\/h3>\n

Data survey on the IT security situation of hospitals reveals weaknesses
<\/strong>The more central the system-maintaining and social importance of a facility is, the higher the risk that it will be targeted by cybercriminals - often combined with high ransom demands. A rapid increase in hacking attacks on healthcare facilities, not just since the Corona pandemic, shows how real the threat is. Since January 2022, the Patient Data Protection Act (PDSG) has required medical facilities to take appropriate organizational and technical IT security precautions in accordance with the state of the art.
<\/span><\/p>\n

The audit of 1,286 hospitals shows considerable need for action in IT security. Data was collected by gathering and processing information from publicly available sources.\u00a0<\/span><\/span><\/p>\n

The Results\u00a0<\/h3>\n

Protected Mail Dispatch<\/strong>
Fifty-eight percent of the hospitals reviewed sent email partially unprotected (without an SPF record), making it easier for attackers to launch spam and phishing attacks through mail forgery.<\/p>\n

Accessibility of the System Interfaces<\/strong>
44 percent do not adequately protect all database systems that belong to the hospital from cyberattacks. <\/span>Unsecured systems that can be accessed from the outside make it easier for hackers to gain access to sensitive data.<\/p>\n

Data Transmission Security
<\/strong>In addition, 90 percent allowed data transmission using outdated transport encryption, which encourages data theft.<\/p>\n

Obsolete Applications
<\/strong>At least one application with a potential security vulnerability of high criticality was found in 41 percent. Applications with missing security updates are a welcome gateway for attackers.<\/p>\n

GDPR Compliance
<\/strong>20 percent of hospitals used tracking cookies without user permission. In these cases, warnings and fines can threaten.<\/p>\n

\u00a0<\/p>\n

Gain Clarity on Your Medical Facility's External IT Attack Surface<\/h3>\n

IT managers do their best to ensure the security of their IT infrastructure. But how can the current security status be continuously verified? With LocateRisk's IT security analysis, it's easy, safe and fast. Interested organizations can receive a security assessment of their IT landscape, including a 30-minute initial meeting with insight into the details, free of charge at: Tel. 06151 6290246 or email to: em@LocateRisk.com<\/a><\/p>\n

\u00a0<\/h3>\n

\u00a0<\/p>\n\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Request your personal Live-Demo now<\/h2>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t

Identify and reduce your cyber risks through a comparable and understandable overview of your IT security. Let our experts advise you and find out how LocateRisk can help you solve your cyber risks.<\/p>\n\t\t\t\t\t\t\t<\/div>\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div> \n\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t