Throughout these shifts in the market, IT-managed-service providers have endeavored to remain nimble to help clients realize the advantages of new solutions and cybersecurity-enhancement measures. These companies offer a suite of services and expertise that reach far beyond mere “tech support.”
Indeed, leading IT-managed-service providers deliver a broad, strategic-focused service offering that may include providing prevention-focused cybersecurity consulting and training, long-term IT road-mapping, and staff to serve as virtual chief information or virtual chief information security officers.
Asking the right questions of potential partners It may be daunting for health systems that have not previously investigated engagements with IT-managed services companies to know where to begin. Following are a few questions to ask to help identify the right enterprise-wide cybersecurity and strategic IT support partner:
Do they have expertise in healthcare? In some cases, IT-managed-services providers jump into healthcare sensing a business opportunity, assuming that experience in other industries is sufficient background and preparation. That’s an unwise assumption. While there are commonalities across industries, healthcare is its own entity. Qualified IT partners should specialize in healthcare, and the size of their client base, leadership background, and proven outcomes for clients should reflect that focus.
Do they offer best-of-breed technology? In general, healthcare organizations gravitate toward best-of-breed technology, as the evolution and consolidation of the EHR market shows. Managed-service providers should not only have experience with market-leading technology, but they should be capable of tailoring these platforms to fit the healthcare provider’s clinical and business use cases. Alternatively, for organizations that have already implemented best-of-breed technology that has not lived up to expectations, IT partners should suggest additional options to help providers reach their clinical and financial goals.
How will we be protected from data breaches? Given the financial and reputational implications of data breaches for healthcare providers, cybersecurity must be providers’ highest IT priority. Accordingly, the right IT partner should have established experience and expertise in every aspect of healthcare-exclusive cybersecurity, be highly knowledgeable of the new tactics used by threat actors, and fluent in the complex security and privacy requirements of HIPAA.
