[{"innerBlocks":[],"name":"core\/freeform","postId":1157,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"

Healthcare organizations should look for incremental reduction of risks by making use of phishing education campaigns, says Kate Borten.

This is especially important because front-line workers play such a large role in data security, and hackers have become very sophisticated in their ability to fool individuals into clicking on a malware-infested email\u2014even if an individual is watching out for such emails, says Borten, president at the Marblehead Group, a security consultancy.

The training needs to incorporate different examples of phishing lures, Borten advises.

\u201cYou need to regularly conduct phishing exercises which become part of the security toolkit and provide feedback on how well employees did,\u201d she says. \u201cDo the education, and then phish your employees and see what proportion fell for a phish, and keep phishing them and watch the numbers go down until most are not being phished.\u201d

Also See:<\/b> Phishing attack risks data of 30,000 patients of Mississippi facility<\/a>

The reality is that most providers don\u2019t conduct an adequate risk assessment, but for those who do the assessments, there comes a time when the risk of phishing becomes tolerable because the organization is ready and employees\u2014which should include all senior leaders as well\u2014are no longer easily fooled.

Still, for some providers, a certain laxity remains if the organization is not updating device configurations, which opens a point of entry for hackers.

\u201cYou need to have a standard secured configuration enterprisewide,\u201d Borten says. \u201cYou need to have settings placed on a new server or other devices. You need to check if active accounts are left open and if active passwords are open. Any time you are configuring a device, you better be using a standard secured configuration.\u201d
","saveContent":"Healthcare organizations should look for incremental reduction of risks by making use of phishing education campaigns, says Kate Borten.

This is especially important because front-line workers play such a large role in data security, and hackers have become very sophisticated in their ability to fool individuals into clicking on a malware-infested email\u2014even if an individual is watching out for such emails, says Borten, president at the Marblehead Group, a security consultancy.

The training needs to incorporate different examples of phishing lures, Borten advises.

\u201cYou need to regularly conduct phishing exercises which become part of the security toolkit and provide feedback on how well employees did,\u201d she says. \u201cDo the education, and then phish your employees and see what proportion fell for a phish, and keep phishing them and watch the numbers go down until most are not being phished.\u201d

Also See:<\/b> Phishing attack risks data of 30,000 patients of Mississippi facility<\/a>

The reality is that most providers don\u2019t conduct an adequate risk assessment, but for those who do the assessments, there comes a time when the risk of phishing becomes tolerable because the organization is ready and employees\u2014which should include all senior leaders as well\u2014are no longer easily fooled.

Still, for some providers, a certain laxity remains if the organization is not updating device configurations, which opens a point of entry for hackers.

\u201cYou need to have a standard secured configuration enterprisewide,\u201d Borten says. \u201cYou need to have settings placed on a new server or other devices. You need to check if active accounts are left open and if active passwords are open. Any time you are configuring a device, you better be using a standard secured configuration.\u201d
","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

How regular phishing drills keep providers’ data safe

More for you