GUEST COLUMN:
Angharad Watson
Manager
Digital Transformation Innovation Institute, Cardiff University
In the digital age, cybersecurity is a fundamental aspect of any business operation, and this is especially true for the healthcare sector.
Yet, despite its critical nature, many businesses still perceive it as the sole responsibility of the IT department.
This mindset is outdated and dangerous. Cybersecurity is a business-wide concern, and the ultimate responsibility lies with the highest levels of leadership. If a breach occurs, it is not the head of IT but the CEO who will be in the spotlight.
Healthcare presents unique cybersecurity challenges. Many companies in this sector come from a medical technology or clinical practice background rather than an IT or cybersecurity background. This often means that their primary expertise lies in medical advancements rather than in securing the digital infrastructure that supports these advancements. Consequently, amassing the right cybersecurity expertise within these companies is crucial.
The healthcare system, particularly within the NHS, is a vast and complex network of legacy systems. Integrating new technologies into this ecosystem while ensuring the security and integrity of data is a formidable task. The need to share data for operational efficiency must be balanced against the imperative to protect this data from cyber threats.
One of the key messages we emphasise to companies is that cybersecurity is not just an IT issue; it is a leadership issue. The person ultimately responsible for cybersecurity is the one who will face the consequences in the public eye if a breach occurs. This reality should prompt CEOs and other senior leaders to take a more active role in understanding and overseeing their organisation’s cybersecurity posture.
Cybersecurity in healthcare is a complex challenge that requires a comprehensive, organisation-wide approach. Leaders must recognise their role in cybersecurity and work to build the necessary expertise and infrastructure to protect their data and systems.
If you’d like to know more about getting your team skilled in cyber, take a look at Cyber Innovation Hub’s short, hands on upskilling courses, and if you would like to know more about immersive testing of your networks and devices, check out the Cyber Innovation Hub testbed facilities
