Ulistic Projects Blog

Healthcare was a lucrative target for hackers in 2018. Cybercriminals are getting more creative despite better awareness among healthcare organizations. And fines for breaches of patient information are increasing. What more can you do to ensure your patient data is secure?

What Should You Do To Secure Your ePHI?

Healthcare was a lucrative target for hackers in 2018. Cybercriminals are getting more creative despite better awareness among healthcare organizations. And fines for breaches of patient information are increasing. What more can you do to ensure your patient data is secure?

If You Don’t Secure Your Data–Prepare For Ever-Increasing Fines

According to Health IT Security, in February 2019 Tennessee-based Community Health Systems (CHS) settled with the 4.5 million patients impacted by its 2014 data breach. Those patients who experienced identity theft or fraud due to the cyber attack will receive up to $5,000 each.

The lawsuit counsel also requested approval to award attorney’s fees for the case (about $900,000), as well as an incentive award of $3,500 for each patient they represented.

This is just one example of a healthcare breach and its effects. Click here to learn about some of the biggest healthcare breaches for 2018. 15 million patient records were breached in 2018 as hacking and phishing surged. This number tripled from 2017.

Don’t Let This Happen To Your Healthcare Business–What Should You Do To Secure Your ePHI? — Ask your IT provider to implement a Layered, Managed & Proactive Approach To IT Security.

This is the industry’s definitive source to prevent healthcare data breaches…

You need these 4 layers:

1. For your Computers: Your need Anti-Virus, Anti-Malware and Zero-Day Protection that’s managed by your IT Managed Service Provider so you know new updates are being applied daily.

• Managed Anti-Virus & Anti-Malware: This keeps both known and emerging viruses and malware off of your workstations and servers. Because it’s managed, it stays up-to-date with the latest cyber threats. It also protects against new viruses by using behavioral scanning and heuristic checks. These detect new, unrecognized viruses and malware and send them to a sandboxed environment away from your core systems. This is essential with all the new virus and malware threats being created each day.
• Zero-Day Protection: This provides end-to-end cybersecurity protection for your computers, as well as your networks, endpoints, mobile devices, and cloud-based services when an unknown security vulnerability in computer software or an application occurs, and where a patch hasn’t been released to handle it.

2. On Your Network: You need a Next Generation Firewall. This detects and blocks complicated cyber attacks by enforcing security measures at the protocol, port and application level.

Next-Generation Firewalls can be implemented in either software or hardware. The difference between a standard firewall and a next-generation firewall is that the next-gen performs a more in-depth inspection and in smarter ways. It brings added information to the firewall’s decision-making process. It also has the ability to understand the details of web traffic passing through, and can take action to block anything that might exploit your network’s vulnerabilities.

3. Email:  You need SPAM filtering with link and document scanning. This is a service designed to block SPAM from your users’ inboxes. It sets up an email gateway that stops the bad guys before they reach your inbox while making sure the good guys (you) aren’t bogged down trying to manage it. Many email messages today are SPAM. SPAM filtering is critical for keeping phishing emails off your computers. However, even the best filters can’t block 100 percent of SPAM messages. This is another reason why you need #4 below.

4. User Education: Different sized organizations cope with dissimilar problems, but all have employees who are usually the weakest link in their IT security. Modern phishing and social engineering attacks are a major threat to medical businesses today. Even a single unaware employee is enough for a cybercriminal to trick through email to gain access to your ePHI, data, finances and more.

Security Awareness Training tackles this problem head-on. You need ongoing education that trains your employees in cybersecurity measures and protocols via a comprehensive curriculum that includes simulated hacking and phishing attempts —This helps your employees know what to look for when using your IT systems.

To ensure cybersecurity, your staff should know…

• How to identify and address suspicious emails, phishing attempts, social engineering tactics, and more.
• How to use your practice management technology without exposing data and other assets to external threats by accident.
• How to respond when they suspect that an attack is occurring or has occurred.
• Additional vital information to maintain cybersecurity.

In addition …

Ask your IT provider to implement these 4 solutions to minimize your risk:

1. Data encryption so your ePHI and EHRs are secure both in transit and storage.
2. Multi-factor authentication where your users must use two or more forms of electronic identification to access data.
3. Routinely patch and update your software programs to close any security gaps.
4. Mobile Device Management to protect your data if mobile devices are lost or stolen.

With this and a layered, managed and proactive approach to IT security, you should have a fighting chance against today’s cyberattacks.

Small business growth is a challenge of keeping up with success without crumbling under commercial weight.

Many improvements needed to reach the next stage of success can be prohibitively expensive, leading to debt and risky gambles that could fail from random chance even if you’re doing everything right.

Tech growth opportunities are becoming more affordable every day. Here are a few details to help you understand how tech outsourcing can improve your business growth.

Reduce Utility Costs

How much power does it take to run a server? What about a room of desktops?

Do you think that equipping everyone with a smartphone or tablet will solve your electrical problems? Not if they still need a server to manage files or run a website.

What about your network equipment? If your business is growing and has heavy network needs, you’re still paying for routers, switches, and hubs. What is the electrical load on those devices?

The answer to those questions is different for every business, but they’re still a cost that can be observed. Every minute of every connected device means more ticks added to your company’s electrical meter, and that adds up over time.

Not every business can operate as a lean, agile tech dream that swipes its way through the cloud. Many businesses still need desktop computers or all-in-one solutions for heavy-duty computing tasks.

Servers are still necessary for any business, whether it’s to share bulk files through the business, host a global customer-facing website, or render complex graphics. All of these tasks generate heat, which means more electricity used in cooling from air conditioning systems.

This could be a good time to discuss the best way to cool a server room. Discussions about central air versus directed pipes, water cooling for high-performance graphic design or scientific research computer may be necessary.

You could build a data center for your growing, small business. You could also struggle through a swamp of growth, making it harder to break that plateau between a small business and a powerful enterprise.

Or you could make it someone else’s problem.

Cloud Computing Turns Tech Needs Into Simple Services

Outsourcing IT services such as web servers, file hosting servers, backup systems, or even workstations is easier than ever. There may be a lot going on in the background, but for you, it’s simple: power up, log on, and access your cloud services.

Almost anything digital can operate across cloud computing. Your business could use a standard internet connection to log into outsourced servers that hold your business files and work with virtual computers that do a lot more than the standard desktop or laptop.

Virtualization allows you to spend less money on powerful workstations. Basic, reliable workstations can be installed to log in, and as long as they can handle a few basic office tasks, they can log into a virtual server.

This server and its virtual workstations are carved from massive cloud computing resources to fit the mold of what you need. Virtual machines can be erased and rebuilt quickly, and can be configured to fit greater needs as long as you give virtualization engineers a reliable set of requirements.

It all comes together to an easier to understand, consistent, and probably lower bill for your tech assets. Your business can grow on the cloud, and you can perform estimates to figure out when—if ever—you need to split off to your own IT infrastructure.

Keep in mind that great businesses still use these services as they grow to behemoths that control global commerce. Just because they can afford to build their own systems doesn’t mean it’s efficient, and it can be more cost-effective to seek outsourced IT partnerships for specific projects.

Do you have high-security data that can’t be compromised? By all means, protect what needs protecting and outsource anything else.

That said, be sure to bring up your security requirements with a system engineer. You may discover that their security standards are higher than your own, or you could enter an agreement to modernize your security.

By working with outsourced IT professionals, you’re not just buying a single service and ignoring them for everything else. If your partnered professionals lack the skills or resources for a specific task, they know where to find someone who fits the job.

Reduce Staffing Overhead

How much does the average IT professional cost? It’s more than just their salary.

When hiring a technician or engineer for a necessary, meaningful position, they need to work at peak efficiency. Just like the hardware and software they manage, a technician needs maintenance, updates, and continued relevance in the business.

A good technician can handle the task at hand. A great technician grows into new challenges, searches for other tasks that leaders may not have noticed, and innovates.

To create a great environment for IT professionals, a business needs to provide training and encourage participation in multiple industry events. They need to have their finger on the pulse of your business ventures and know their own tech potential, which often means reaching into other industries.

While doing all of this, IT professionals need to do the job that you give them. They also need to sleep. They probably need a personal life, but the work-life balance is always a touchy subject.

The question is simple: can you afford that kind of technician?

If your business isn’t creating a bleeding-edge engineer as an incubator of industry progress, neither you nor that technician is reaching their greatest potential. You’re paying them for a specific set of tasks, and in order to grow, that technician will need to reach outside of the business for their growth.

If they reach too far, you may lose that technician and the few growth opportunities you were able to pay forward. Instead, create a partnership with a business that deals in technician growth.

Outsourced IT solutions from managed IT businesses will give you access to trained technicians who are ready to handle your challenges. You are the task, the goal, and the client. You are not, however, responsible for building an entire technician.

Education And Training A Benefit, Not A Cost

Your business is still part of that growth and still provides benefits. Like any profession, experience is a steady march forward through workplaces, job sites, and challenges. Someone else is helping that technician grow, and that’s okay.

Unless your business is centered on IT education—or if you’re an engineer who really likes taking other engineers under your wing—this is a better deal for everyone involved. Tasks can be spread out across multiple technicians who can handle the same projects, but you’re quoted for the service that you purchase.

You’re not responsible for posting job applications on Indeed or CareerBuilder. You’re not responsible for sending technicians to expensive seminars with questionable benefits.

While there’s nothing wrong with taking interest in an outsourced technician’s training or even suggesting a path, the distinction is important: your business won’t sink or swim if you’re not paying for their classroom and self-study growth.

Contact an IT support professional to discuss other ways to enhance your business growth.

Financial service firms: beware. Your data is a target. A new report out of the United Kingdom (UK) cannot underscore enough the severity of the issue. But it is nothing new. The FBI has put the alarms on since 2011, from threats of account takeovers to third-party payment processor breaches to securities and market trading exploitation to mobile banking exploitation and even supply chain infiltration, among other ways. Hackers are more advanced and more prevalent than ever. What is shocking about the new statistics from the Financial Conduct Authority (FCA) is the sheer increase of breaches after the implementation of the General Data Protection Regulation (GDPR). Here’s what to know and what to do.

Alarming Statistics from the FCA

The numbers are alarming and demonstrate a real concern among financial institutions and the protection of their assets and data. The total number of breaches reported by UK financial services firms to the FCA was 145 in 2018, which was up from 25 in 2017. That makes it an increase of 480%.

The breakdown of the 145 reported breaches is shown in the below chart (as provided by the FCA) with the last three years also included — this demonstrates the stark increase in reported breaches over the course of four years.

Why was there a dramatic increase in breaches in 2018?

There are a number of theories why financial services firms in the UK reported 480% more data breaches in 2018 than the previous year. The percentage alone is enough to send warning alarms throughout the work, but do the reasons justify the urgency?

• First, the financial services sector offers a lot of what hackers want: data and money.
• Second, much of the financial services sector has not been using the most advanced technology and artificial intelligence (AI) to protect their information and data, according to a report conducted by Accenture and released in 2018, Cost of Cybercrime: Financial Services. In fact, “only 26% have deployed AI-based security technologies and 31% advanced analytics.”
• Third, hackers themselves are becoming more numerous, bolder, and more sophisticated — alongside the advancement of technology.
• Fourth, the GDPR came into effect in 2018, which requires reporting breaches within 72 hours of discovery — so the increase in the statistics may be — in part — due to a legal requirement to report the breaches.

Thus, the combination of all these things: the financial services’ data, the desire of hackers to obtain that data, the limited protections financial services firms have had in place until recently, and the new requirement to report all play a role in the dramatic increase in reported breaches. So, not all is as bad as it seems. The increase can be in part attributed to the new requirement to report the breaches as opposed to earlier years when such a requirement was not present, and such reporting could be damaging to the reputation of the financial institution — thus, an incentive not to report until it became required.

What can financial services firms do to protect themselves better from hackers and data breaches?

Whether you are in the UK or the United States or elsewhere, financial services firms can protect themselves. It all involves a well-crafted IT plan-of-action that can include any of the below options according to the firm’s needs, wants, and specifications.

Implement and Education & Training Strategy

First thing’s first, you need to educate yourself and your firm on cybersecurity and cyber attacks. You need to know how hackers are hacking into your systems. You need to know what the latest technology is to counter hackers, including AI. You need to be informed on data management and data destruction and disposal. And you need to inform all staff and employees. The problem in data breaches is not only related to hackers hiding in a dark space using malware and other devices and software to obtain access to confidential information, but they use tricks via email and other means to gain access from, for example, unsuspecting and uninformed employees who open emails without thinking twice and who use poor passwords without consideration for how easy they are to be hacked.

An informed company and an informed staff are your first line of business. An internal team can conduct education awareness and training or else a third-party vendor can be hired to do so. It comes down to how large your firm is and what your resources are to manage it.

Assess Your Current Technology & Identify What You Need

You need to assess the current status of your technology, challenges, and vulnerabilities so that you can recognize what you need and where you need it. There are different ways or approaches a firm can take to assess its technology needs, but in general, it should include:

• Gathering information on company and employee needs, considering functional needs, software requirements, technical requirements, and security needs (i.e., natural threats from environmental conditions, intentional human threats (e.g., hackers and disgruntled employees), and unintentional threats (e.g., poor password creation or unintentional leaks).
• Reviewing the information gathered and prioritizing identified needs.
• Document the results from your findings so that you have the information in one accessible location from which you can build a plan.

Acquire the Technology You Need & Implement It

Once you have the information you need, design a multi-layered system that is:

1. Adaptive;
2. Responsive; and
3. Preventative.

Financial services firms can no longer stand to be reactive; too much is at stake. Once you know and prioritize what you need, acquire it and implement it. Research to ensure you purchase the best in technology and/or hire the best third-party vendor (e.g., a managed services firm). The goal here is to bring those statistics back down, or in the least, maintain them.

No matter how good technology gets, technical issues are still and will continue to be a major cause of lost productivity for individuals and companies. Problems with slow or crashed computers, loss of internet service, printers not working, dropped telephone calls, and other annoying little gremlins are costing companies millions of dollars a year, including yours. Whenever your tech isn’t working the way it should, you’re losing revenue and it quickly adds up.

A Sobering Statistic

To get an idea of just how costly all those little glitches are, consider the results of a recent survey by Robert Half Technology. The study found that, on average, workers spend about 22 minutes each day dealing with some type of IT issue. That adds up to an eye-opening 91 hours annually or two weeks of downtime for each employee in your organization.

So think about what that equals in loss of revenue. Some people generate more than others of course. But if you have a professional who’s billing by the hour, for example, or a salesperson who is bringing in say $10,000 per week, and they’re out of commission for two weeks each year, that soon starts to add up to some serious money.

IT issues will always be a fact of life for modern companies to one degree or the other but there is a proven way to keep them to a minimum and reduce their impact on your business operations. It all depends on how well your managed services provider, or your in-house team, addresses your needs and resources.

A Matter Of Strategy And Priorities

A good provider will devote time and resources to two key priorities:

• Optimizing your technology resources, regularly monitoring and testing your system to make sure it’s functioning at its optimal performance, and preventing problems from occurring in the first place, not just reacting when an emergency happens.
• Devising a strategy that implements the type of technology that will best serve your company’s unique and specific needs.

If you have systems and equipment in place that you don’t necessarily need, that’s a drain on your resources and budget and creates more complexity, and thus more opportunities for things to go wrong. If, on the other hand, you don’t have the capabilities you need, efficiency and productivity will be hampered.

An experienced and professional managed services provider will ensure that your organization has the right balance, providing you with the optimum in performance. They will also monitor your system in real time to spot potential problem areas, and to be able to react quickly when they do happen.

Your technology partner should be willing to work with you on a personal basis to devise a plan that will best fit your needs, and they should always be available. If you have a question or an issue, you don’t want to reach an answering machine or service.

It’s easy for a business to get used to minor tech issues and become complacent about them. But the fact is that they’re costing you more money than you know. Finding a good IT partner could be one of the best business decisions you’ll make.