Did you know?
of French people have used online medical appointment services
of French people have consulted or received medical results via the Internet
hit French hospitals in 2020
Patrowl.io's advantages for healthcare cybersecurity
Regulatory compliance: RGPD, CaRE program and other local regulations by identifying and correcting security loopholes.
Protect patient data: Ensure the security of medical information to prevent unauthorized access.
Critical infrastructure security: Protect hospital management systems and connected devices to ensure their availability.
Continuous monitoring: Receive real-time alerts on threats and vulnerabilities before they are exploited.
Partnership with CAIH: officially referenced on the S.A.L.O.H.M.É market of C.A.I.H (Centrale d'Achat de l'Informatique Hospitalière), validating our 100% compliance with the CaRe program.
The main impacts of cybersecurity on the healthcare sector
Increased exposure of sensitive data: Protect patient data against unauthorized access and potential leaks.
Disruptions to critical operations: Maintain continuity of care by avoiding interruptions caused by cyber attacks.
High remediation costs: Reduce the costs associated with remediating security breaches and incidents.
Loss of patient trust: Preserve trust by ensuring the security and integrity of medical information.
Regulatory penalties: Avoid fines and other sanctions by ensuring compliance with security and confidentiality standards.
Reputational impact: Protect your organization's reputation by avoiding data breaches and high-profile security incidents.
To find out more :
On the night of February 8-9, 2021, the Centre Hospitalier de Dax suffered a large-scale ransomware attack. Malware encrypted the facility's data, paralyzing its entire IT system and interrupting the operation of all electronic devices, including telephones and computers, disrupting care services.
On February 16, 2021 at 4:30 am, the Villeneuve-sur-Saône Hospital was attacked by the RIUK ransomware, also affecting the Villefranche, Tarare and Trévoux sites. The attackers demanded a ransom to unlock the system's data. To contain the spread of the virus, access to the information system and the Internet was suspended, and surgical procedures were postponed.
On December 21, 2020, the Centre Hospitalier d'Albertville-Moutiers fell victim to a ransomware attack, forcing them to operate in degraded mode for several weeks. Data encryption led to an almost total shutdown of the information system, affecting many essential services.
Training
Organize regular hybrid training sessions in small groups to reinforce cybersecurity in healthcare facilities. Incorporate practical, contextualized scenarios to raise staff awareness of cyber threats specific to their environment. Use ANSSI and ANS resources to enrich training and crisis management exercises, to promote a shared and effective security culture.
Security measures
Concentrate on securing infrastructures and basic operating systems, in addition to business applications. ANSSI guides offer recommendations for securing these critical layers.
Protecting digital assets
Adopt a “Zero Trust” security model to manage internal and external access. Ensure that access is strictly controlled to protect against internal and external threats.
ANSSI (French National Agency for Information Systems Security)
The ANSSI is the national authority for the defense and security of information systems, reporting to the Prime Minister. It coordinates cybersecurity policy and responses to cyberattacks on a national scale.
General Secretary of the Social Ministries
Coordinates defense and security policy, including digital security, within the social ministries. Under his authority, the official in charge of information systems security (FSSI) steers security policy and incident response, in liaison with ANSSI and CERT Santé.
Ministerial Delegation for Digital Health (DNS)
Leads digital transformation in the healthcare sector, including digital security. In liaison with the HFDS department, DNS coordinates digital security policies and the implementation of initiatives, with the Agence du Numérique en Santé (ANS).
Agence du Numérique en Santé (ANS)
Supports the digital transformation of the healthcare system. It regulates, designs national programs, and supports local e-health initiatives in cooperation with regional health agencies (ARS). Its roles include regulating, operating and promoting digital initiatives.
Regional Health Agencies (ARS)
Implement digital security policy at regional level.They are responsible for the cyber component of the digital shift, supporting local players, responding to incidents and monitoring the cyber maturity of healthcare structures.
