By John Grimm

In cybersecurity one thing is certain: if there is a vulnerability, hackers will eventually find it.

While this may be an inconvenient truth in the security industry, it is particularly problematic in healthcare, where an exploited vulnerability can put a patient’s life at risk. What if a well-meaning medical professional’s care process is undermined by a device whose integrity has been compromised?

As the concept of connected healthcare technology evolves, it is providing a pathway to improved care, higher patient satisfaction, and reduced clinical costs – it is the future of the healthcare industry. In fact, technology companies working to improve operational efficiencies and create a more personalized level of care have given rise to the “Connected Health” market which is estimated to be worth $612 Billion by 2024. The desire to reap the benefits of this burgeoning market comes with a new set of risks. When adopting these new technologies, one must be balanced with a pragmatic view of a new set of risks and the need to protect patients from potentially life-threatening events. Whether it is electronic health records (EHR), remote diagnosis or lifestyle management and monitoring apps, the Internet of Things (IoT) is undeniably catapulting medicine into the future, and transforming the landscape for hospitals, clinicians and medical device makers alike.

Recently, we’ve seen another health device hack in the news. Hackers were able to directly install malware into patients’ pacemakers. Despite the first pacemaker hack taking place nearly 10 years ago, we’re still dealing with device vulnerabilities, most significantly through connectivity and IoT. The approach to IoT security of putting convenience and customer experience over security can’t work in healthcare simply because the consequences can be deadly.

An implanted risk
Having your payment information stolen has become so commonplace it’s an irritating hassle as opposed to a traumatic experience. Losing your personal information is a bit more exasperating but compromising a medical device can literally be a life-or-death situation. The rise of connected pacemakers and other medical devices has undoubtedly provided more benefits to patients than limitations. However, the fact remains that since these devices directly impact the health and safety of a patient, it is imperative that security is part of the core design and strong security throughout the product’s life cycle remains intact and accounted for.

Health IT Homepage