Cybersecurity in Healthcare

Perspectives on Health and Tech

Summary

It’s essential to prioritize cybersecurity, particularly for healthcare organizations that handle sensitive patient information. With so much at stake, it’s critical to recognize the importance of cybersecurity and take proactive measures to prevent potential breaches. In a recent discussion, two experts from Oracle emphasized the significance of areas such as ransomware resiliency, cyber-recovery, and other crucial aspects of cybersecurity.

Featuring

• Waleed Ahmed, Senior Manager, Cloud Engineering, Oracle
• Esteban Rubens, Field Chief Technology Officer, Oracle Cloud   

Hear Them Talk About:  

• What’s going on with cybersecurity in healthcare today (0:42)

• What Oracle Health is doing to address the cybersecurity situation (1:17)

Areas of Focus

What is the threat intelligence in the platform? (1:27)

The need to continuously monitor and detect threats (1:50)

How to allow the business to continue and provide care in the event of an attack (2:35)

Ransomware resiliency and ransomware recovery (2:53)

How to deliver a cyber-recovery (3:17)

A recap of the three prongs that Oracle is focused on to deliver cybersecurity (3:47)

How Oracle can support both clinical and non-clinical systems (4:08)  

Notable Quotes

“There’s an incredible amount of scrutiny in understanding what the threat landscape is and it’s becoming more prevalent in healthcare, where it’s an opportunity for attackers to lock in and prevent businesses from occurring where it matters most.” - Waleed Ahmed

“You have to be able to say, not only is my architect resilient, but in the event I do have a cyberattack, can the business continue?” - Waleed Ahmed

“Oracle is delivering in three different prongs. The ability to detect, the ability to assess, monitor, and also provide the capability of bringing the systems back up.” - Waleed Ahmed

Learn more about how Oracle is safeguarding operations with resilient architecture and military-grade security.

Watch on-demand and live webcasts by registering for Oracle Health Inside Access. 

--------------------------------------------------------

Episode Transcript:

00:00:00:00 – 00:00:00:09 Perspectives introduction You’re listening to Perspectives on Health and Tech, a podcast by Oracle with conversations about connecting people, data, and technology to help improve health for everyone.

00:00:00:10 - 00:00:00:24 Esteban Hi, I'm Esteban Rubens. I’m the Field Healthcare CTO at Oracle Cloud. And we're here to have a quick chat on cybersecurity and health care. I'm joined by Waleed Ahmed. He's a leader on the engineering and architecture side of Oracle Cloud. Welcome.

00:00:00:24 - 00:00:00:25 Waleed Pleasure to be here, Esteban.

00:00:00:26 - 00:00:00:35 Esteban What's going on in cybersecurity in health care today? We've seen so many headlines. There's a lot going on, very high profile attacks. There's a lot of flack everywhere. What's your take on it?

00:00:00:36 - 00:00:01:01 Waleed There is there's an incredible amount of scrutiny in understanding what the threat landscape is, and it's becoming more and more prevalent where especially in health care, where it is an opportunity for attackers to lock in and prevent businesses from occurring where it matters the most, especially after the pandemic that we've come out of right now.

00:00:01:01 - 00:00:01:36 Waleed And it has opened up a great amount of pressure on the organizations to do something about it. And in Oracle Health, what we're doing is we are addressing the situation in a manner of three areas. First of all, is understanding what the threat intelligence is in the platform, understanding threat intelligence and using capabilities from security scientists, and also third party vendors such as CrowdStrike to bring in and assess, assess and interpret what the possible threat areas are.

00:00:01:37 - 00:00:02:07 Waleed Now, once you've assessed it, you need to be able to continuously monitor and while you're monitoring, being able to immediately detect it. So understanding these two capabilities need to exist in an architecture will allow, you know, security leaders within the health space to take a take a relaxing mode and saying understanding that, yes, I have the intelligence and I also have the constant detection and and and monitoring of our of of our architecture.

00:00:02:08 - 00:00:02:34 Waleed So those two parts are there now. It's not really complete unless you think about in the event of an attack, how do I allow the business to continue? We cannot stop giving care, especially in a provider space. So in those type of settings, it's a it's a it's a life or death situation. Right. It's being able to provide critical emergent care immediately.

00:00:02:34 - 00:00:02:59 Waleed Now, to be able to do that, you have to not only think about ransomware resiliency, but you have to think about ransomware recovery. You have to be able to say, not only is my architecture resilient, but in the event I do have a cyber attack, can I allow the business to continue as, as you all know, that a cyber attack, when it happens, there is a crime scene investigation put around it and there has to be scrutiny, investigation.

00:00:03:00 - 00:00:03:30 Waleed So business can come to a halt. If you were able to address by delivering a clean room and at dynamically through the cloud capabilities of Oracle, rebuild a reliable, uninfected environment and provisioning it at a moment's notice, that's where you deliver a cyber recovery, a true cyber resilience that is able to recover in and with confidence and allow the business to continue.

00:00:03:31 - 00:00:03:43 Waleed So Oracle is really delivering in three different prongs. It's the ability to detect, the ability to assess, monitor and also provide you provide the capability of of bringing bringing the systems back up.

00:00:03:44 - 00:00:04:03 Esteban That's crucial, though, whether the rapid recovery so that you can continue operations regardless of what's going on. And what about tiering of the different kinds of systems or clinical non-clinical, things like the EHR, billing? We've heard about things happening around the billing system. We can help with all of those areas.

00:00:04:04 - 00:00:04:15 Waleed Absolutely. I mean we have front line EHR that delivers into a backend payroll that pays critical resources to deliver the necessary needs.

00:00:04:16 - 00:00:05:04 Waleed So with that, we we understand and deliver security in depth. That means we will start at where the data resides to secure that all the way out to the edge. So that that in itself is because we run our oracle help platform on oracle cloud infrastructure. Inherently, it delivers security at the data tier all the way up to data in motion and as well providing key capabilities such as web access, firewalls such as, such as cloud strike capability within a cloud guard, and also with the same tool monitoring and detecting issues on the front line too, all the way in the back end where you're having connectivity between provider and payer in that sense.

00:00:05:05 - 00:00:05:23 Esteban Obviously, we could talk about this for hours and hours. We would love to talk to all of you about this. We are more than happy to have any of those discussions and expand upon them and give you very specific examples. So reach out to your Oracle resources and we can happily get engaged. So again, thank you, Waleed.

00:00:05:24 - 00:00:05:26 Esteban Thank you all and we look forward to seeing you soon.

00:00:05:26 – 00:00:05:38 Perspectives outro Be sure to subscribe to Perspectives on Health and Tech podcast. For more insights from industry experts, visit Oracle.com/health or follow Oracle Health on social media.