Press/News

By Ian Terry, Information Security Consultant at Intraprise Health

As the reality of working from home sinks in, many remote workers and their employers are seeing the appeal fade quickly. We all know that remote work is not quite as simple as it sounds. Technical, operational, and communication challenges are quickly presenting themselves when workforce members overload remote access systems, can’t perform their duties, and don’t know the best channels for reporting their issues and incidents.

Are we prepared for the information security and cybersecurity challenges specific to this new paradigm: remote work in the age of COVID-19? Read More

By Ian Terry, Information Security Consultant at Intraprise Health

The Coronavirus pandemic has catalyzed a rapid increase of telehealth adoption. Leveraging telehealth platforms, patients are able to speak with doctors and nurses without having to risk exposure to themselves or others.

The increase has been so drastic, the U.S. Department of Health and Human Services and its Office of Civil Rights (OCR) and the FBI have released special guidance related to the use of telehealth systems, particularly how they have come under attack by malicious actors and advanced persistent threats (APT).

For privacy and security practitioners in healthcare, the increased use of telehealth and government attention signals the need to learn more about telehealth systems, the security risks associated with their use and strategies for mitigating those risks. Read More

How should health care organizations react when kidnappers grab the goods?

Ransomware is a type of malicious software that infects computers, servers, databases, and managed service providers, encrypting data on the infected platform. The individuals behind the nefarious attack request a price, or ransom, from the organization in order to release the information. Generally, they do not provide the data decryption key until the ransom is paid. According to Verizon’s 2019 Data Breach Investigations Report, ransomware incidents accounted for more than 70% of all malware occurrences across the health care industry.

How an Attack Happens
“Often, when a computer or system is infected, a blue screen, or some other anomaly, will appear with a message about the ransomware,” explains Ryan Patrick, MBA, CISSP, CCSFP, senior vice president of security products and strategy at Intraprise Health. “The attackers need to be paid via cryptocurrency to release the records. Health care is specifically targeted, as the health care industry, unlike other industries, has been slow to adapt to the security industry. In 1996, HIPAA went into effect, but people really didn’t pay attention to cybersecurity until about 2015 when there was a big breach at Anthem.”

Read the article in For the Record Magazine 

A local tech firm focused on health care cybersecurity received $5.4 million in Series B funding from its private equity backer at the start of the new year to boost hiring and development of its flagship platform. The investment comes nearly two years after the company, Intraprise Health, was spun out of a Yardley-based software firm.
Read More

Sometimes it’s hard to even consider tackling a problem because it’s so awesome in nature. Webster’s defines awe as “a feeling of reverential respect mixed with fear or wonder.” Healthcare CIOs, CISOs and even members of board of directors express this sense of awe when discussing one of greatest security risk factors in their world — connected medical devices. Cybersecurity experts, however, offer advice: implement your security program incrementally so it won’t be so daunting. Read More

If you think it’s expensive and time-consuming to protect your healthcare organization’s data, you’re right. But just look at the cost of not having a solid security program and experiencing a healthcare breach. You needn’t look far.

A breach can be financially devastating. It will ruin your reputation. It will call into question your organization’s security program and its evident gaps. Patients may say, ‘If they can’t protect my personal information, how can I trust them with my health?” It’s a marketing nightmare. Read More