klas research the state of cybersecurity in healthcare · 2021. 1. 21. · klas insights assist...

KLAS ResearchThe State of Cybersecurity in Healthcare

Garrett Hall, Research Director

2

KLAS Mission: To improve healthcare technology delivery by

honestly, accurately, and impartially measuring

vendor performance for our provider partners.

Our Promise to You… and Healthcare Providers

•Straight Customer Feedback•Actionable Findings•Experience-Based Recommendations

KLAS Influence

© Copyright KLAS 2016 3

3,100

Research focus is on the customer experience.

Healthcare customer executives (VP & C-Level) who actively participate by sharing their experience and benefit from accessing KLAS data/reports.

KLAS is entirely dedicated to improving healthcare, including the provider market, payer market, and the emerging “payvider” market.

Vendors receive guidance.

KLAS insights assist organizations.

4,500

25,000+

750

Healthcare organizations worldwide represented in the KLAS data through the participation of their employees each year who share their voice/experience.

Interviews conducted each year. 95%+ are person-to-person interviews with current customers.

Healthcare IT products and services measured by KLAS.

400 Vendors measured and highlighted in KLAS Reports.

27,839 Downloads of KLAS specialty reports published last year by healthcare customers. Average of 400-500 healthcare customer downloads per report.

28 Members of the KLAS Advisory BoardCLICK HERE to see complete list of Advisory Board Members

http://www.klasresearch.com/about-us/advisory-board

Click to edit Master title style

4

A Sobering Statistic

© Copyright KLAS 2017


5

Who Owns Cybersecurity Today?



6© Copyright KLAS 2017


9

How Do You Detect and Respond to Attacks?



“We try to do external risk assessments monthly. We try to focus on a security-risk-analysis procedure, which allows us to do some penetration testing within the environment to make sure that we can determine any of our current leaks and any additional ports that are currently shut down. I have also hired an ethical hacker to start focusing a lot on the overall process of trying to penetrate our system. I need to know how people are coming in so that we can close any openings as soon as possible.”

“We had a breach about a year ago, so we got the results from the HIPAA security assessment and are now starting to do a risk assessment or prioritization based on the risk to figure out which things we need to start working on first.”


12

What are Providers Focused On?


Technologies Provided by Two Most Impactful Security Vendors


Garrett R. Hall

[email protected]

801-404-5428

21

Contact Info


mailto:[email protected]

4 Critical Componentsfor DLP SuccessBrian Mullins

VP Product Marketing

Digital Guardian

“DLP is one of the most powerful and important tools in our modern security arsenal, and anything with that kind of versatility and wide range of integration points can be a problem if you fail to appropriately plan.”

- Rich Mogull, Analyst & CEO,Securosis

23

#1 - DLP as a Program

24

People

+

Process

+PROVEN METHODOLOGY

Technology

#2 – Proven Implementation Methodology

25

Understand BuildEnforce & Educate

UNDERSTAND

▪ Where PHI is located throughout the enterprise

▪ When PHI is at risk

BUILD

▪ Smart polices & controls

▪ Enterprise wide knowledge how business operates

ENFORCE

▪ Start with monitor only, then move to enforce

EDUCATE

▪ Real-time prompts increase employee awareness and educate users on proper usage

Assess & Improve

ASSESS

▪ Identify policy gaps

IMPROVE

▪ Refine policy

▪ Add additional DLP components

#3 – Implement One Step at Time

26

1

2

3

4

DATA DISCOVERY

NETWORK DLP

CLOUD DLP

ENDPOINT DLP

#4 - Consider DLP MSP

“We think this skill deficit helps explain the growing popularity of Managed Security Service Providers (MSSPs), an attractive option to enterprises looking to modernize their approach to security. According to Gartner, the MSSP space is an $8B market growing at 15%. MSSPs differ from security consulting practices in that they offer shared security services to multiple clients”.

Joel P. Fishbein, Jr. | Software and Cloud TechnologyBTIG Industry Report: Cyber Security Landscape 2016 and Beyond

27

Reduced PHI data

loss risk by 82%

The Power of Real-time Education

Q&A

Confidential

klas research the state of cybersecurity in healthcare · 2021. 1. 21. · klas insights assist...

Documents