Cyber Security in Healthcare – a primer for the Board.
How confident is the Board that the hospital’s most important information is being properly managed and is safe from cyber threats?
Are you clear that the Board members are likely to be key targets?
The impact on the Hospitals reputation, if the existence of sensitive internal or patient information held by the Hospital were to be lost or stolen?
The impact on operational services if our online services were disrupted for a short or sustained period?
Does the Board receive regular intelligence from the Chief Information Officer/Head of Security on who may be targeting hospital information and IT, their methods and their motivations?
Do the Board encourage the technical staff to enter into information-sharing exchanges with other organisations in the sector and across the economy to benchmark, learn from others and help identify emerging threats?
They have identified the key information assets and thoroughly assessed their vulnerability to attack?
Responsibility for the cyber risk has been allocated appropriately?
Is it on the risk register?
Does the Board have a written information security policy in place, which is championed by the Board and supported through regular staff training?
Is the Board confident the entire workforce understands and follows it?