[{"innerBlocks":[],"name":"core\/freeform","postId":332,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Identity and access management solutions are playing a growing role in protecting against cyberattacks in the healthcare sector, experts say.Martin Kuppinger, information and security expert with European-based KuppingerCole Analysts, says it\u2019s time for healthcare organizations to take on Identity and access management (IAM) for security reasons. \u201cHealthcare organizations deal with highly sensitive information,\u201d he says in a recent white paper entitled, \u201cIAM for Healthcare: It\u2019s time to act.\u201dHealthcare organizations \u201cface challenges in complying with ever-tightening regulations, combating ever increasing cyber risks and adapting to digital transformation,\u201d Kuppinger says. \u201cComprehensive healthcare IAM, beyond pure SSO, helps healthcare organizations to better cope with these challenges.\u201d

"While there are many point products that address individual cybersecurity challenges, today\u2019s threat landscape requires a more integrated approach,\u201d says James Litton, CEO of Identity Automation, a company with a product, RapidIdentity Platform, that it says is capable of delivering administration, authentication, authorization and audits.\u201cLoosely piecing together multiple point solutions doesn\u2019t provide the same value as a comprehensive identity and access management platform.\u201d he says. IAM solutions, which include the use of passwordless logins, enable clinicians to log in on any secure endpoint with the tap of a badge, eliminating the need for weak passwords.Litton traveled the country last year speaking to healthcare organizations about their cybersecurity concerns. \u201cGenerally speaking, when we talked to healthcare organizations, they are focused on how practitioners can get at data and protect access, and at the same time, they want to know how they can stay off the 11 o\u2019clock news,\u201d he says. If they are trying to avoid being breached, for some, that won\u2019t be easy. Few organizations, if any, manage the lifecycle access of an employee. Lifecycle management is the process that happens when a new employee is hired and how the company or organization gets them into the system as quickly as possible. When the employee leaves, it\u2019s a matter of how to quickly get them out of the system, so they can\u2019t abuse the accounts that may continue to live in the environment where they worked, or so a hacker can\u2019t leverage those accounts, Litton says.Contrary to popular belief, most cyberattacks do not originate from hackers in eastern Europe; rather, they walk right through the front door, Litton says. For example, maybe an employee has been at a company for 20 years, with access to a number of accounts as they moved through the company. This is exactly what \u201cthe bad guy\u201d wants to exploit when it comes to cybersecurity. If the hacker can compromise Jane Doe\u2019s account and she had access to everything, it makes for a bigger breach. Automated lifecycle management tools deal with that problem. As people move from role to role, the tool grants access as needed and removes it when it\u2019s not needed. Hackers discover passwords through a game of chance, Litton says, that is made 50 percent easier when companies use email addresses for usernames, which most companies do. Now half of the access is a given, because hackers can find the email addresses easily. There are also now \u201ccopious amounts\u201d of password information available from material that has been hacked. It is easily accessible, and \u201cnot even on the Dark Web,\u201d Litton says. This makes it just a matter of time until hackers can gain access, or they run random passwords until they get a win. They might explore access for weeks or even months.As far as payers go, more of them are using the cloud to store data. \u201cThe more you push out to the cloud, the more you lose control,\u201d Litton says. Identity management is one way of regaining control.With the advent of value-based care and health plans setting up platforms and connections with healthcare providers, health plans are left more vulnerable. Hackers can reach through to the payer\u2019s system, if the health system is breached.Access the KuppingerCole white paper here<\/a>. ","saveContent":"Identity and access management solutions are playing a growing role in protecting against cyberattacks in the healthcare sector, experts say.Martin Kuppinger, information and security expert with European-based KuppingerCole Analysts, says it\u2019s time for healthcare organizations to take on Identity and access management (IAM) for security reasons. \u201cHealthcare organizations deal with highly sensitive information,\u201d he says in a recent white paper entitled, \u201cIAM for Healthcare: It\u2019s time to act.\u201dHealthcare organizations \u201cface challenges in complying with ever-tightening regulations, combating ever increasing cyber risks and adapting to digital transformation,\u201d Kuppinger says. \u201cComprehensive healthcare IAM, beyond pure SSO, helps healthcare organizations to better cope with these challenges.\u201d

"While there are many point products that address individual cybersecurity challenges, today\u2019s threat landscape requires a more integrated approach,\u201d says James Litton, CEO of Identity Automation, a company with a product, RapidIdentity Platform, that it says is capable of delivering administration, authentication, authorization and audits.\u201cLoosely piecing together multiple point solutions doesn\u2019t provide the same value as a comprehensive identity and access management platform.\u201d he says. IAM solutions, which include the use of passwordless logins, enable clinicians to log in on any secure endpoint with the tap of a badge, eliminating the need for weak passwords.Litton traveled the country last year speaking to healthcare organizations about their cybersecurity concerns. \u201cGenerally speaking, when we talked to healthcare organizations, they are focused on how practitioners can get at data and protect access, and at the same time, they want to know how they can stay off the 11 o\u2019clock news,\u201d he says. If they are trying to avoid being breached, for some, that won\u2019t be easy. Few organizations, if any, manage the lifecycle access of an employee. Lifecycle management is the process that happens when a new employee is hired and how the company or organization gets them into the system as quickly as possible. When the employee leaves, it\u2019s a matter of how to quickly get them out of the system, so they can\u2019t abuse the accounts that may continue to live in the environment where they worked, or so a hacker can\u2019t leverage those accounts, Litton says.Contrary to popular belief, most cyberattacks do not originate from hackers in eastern Europe; rather, they walk right through the front door, Litton says. For example, maybe an employee has been at a company for 20 years, with access to a number of accounts as they moved through the company. This is exactly what \u201cthe bad guy\u201d wants to exploit when it comes to cybersecurity. If the hacker can compromise Jane Doe\u2019s account and she had access to everything, it makes for a bigger breach. Automated lifecycle management tools deal with that problem. As people move from role to role, the tool grants access as needed and removes it when it\u2019s not needed. Hackers discover passwords through a game of chance, Litton says, that is made 50 percent easier when companies use email addresses for usernames, which most companies do. Now half of the access is a given, because hackers can find the email addresses easily. There are also now \u201ccopious amounts\u201d of password information available from material that has been hacked. It is easily accessible, and \u201cnot even on the Dark Web,\u201d Litton says. This makes it just a matter of time until hackers can gain access, or they run random passwords until they get a win. They might explore access for weeks or even months.As far as payers go, more of them are using the cloud to store data. \u201cThe more you push out to the cloud, the more you lose control,\u201d Litton says. Identity management is one way of regaining control.With the advent of value-based care and health plans setting up platforms and connections with healthcare providers, health plans are left more vulnerable. Hackers can reach through to the payer\u2019s system, if the health system is breached.Access the KuppingerCole white paper here<\/a>. ","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Payers turn to identity and access management to protect data

More for you