Cybersecurity and cloud

Is the cloud secure? Navigating digital transformation with confidence

Jason Griffin

Managing Director, Digital Health Strategy
and Cybersecurity, Nordic

The cloud has revolutionized healthcare by enabling better patient care, streamlined processes, and optimized costs. However, digital transformation comes with a new frontier of cyber threats and security vulnerabilities. Health IT leaders can be overly reliant on the security protocols offered by the cloud provider, creating the potential for a cloud environment to become a hacker’s playground if not appropriately managed. By taking a proactive approach to security for your organization, you can ensure patient safety, protect your health system, and unlock the potential of health IT modernization.

In this Q&A, Jason Griffin, Nordic’s Managing Director of Digital Health Strategy and Cybersecurity, explains cloud security basics and offers practical insights on how healthcare organizations can set up strong cloud security practices and procedures that keep sensitive information safe.

Q: Is the healthcare cloud more secure than on-premise data storage?

Jason: There is a common myth of "inherently secure" clouds. While major providers like AWS, Google, and Microsoft employ robust security measures, the ultimate responsibility for your data lies with you. The cloud provider safeguards the infrastructure, but you control access to your data and its security settings. Treat your approach to cloud security like renting an apartment – the building may be secure, but you still need to lock your door and windows and install a deadbolt.

Q: What are the most prominent challenges organizations face with cloud security?

Jason: Your cloud environment is a complex machine, and misconfiguration is the silent enemy. One wrong setting, one forgotten control, and the entire system is open to data breaches and performance issues. The cloud’s flexibility can be a double-edged sword. Anyone can spin up a server, but sensitive information can be exposed without proper access controls,

monitoring, and training. Even well-intentioned individuals can create devastating security vulnerabilities.

Q: How can hospitals and health systems mitigate risks and ensure their sensitive data is safe in the cloud?

Jason: Cloud settings must be treated with care and scrutiny. Organizations should prioritize investing in the right tools and processes to build a solid security posture. Some key considerations are strong access controls, data encryption, endpoint security, monitoring and patching, and cybersecurity awareness training for all employees. Vigilance is your best weapon against security threats.

Q: How can an organization manage cloud security effectively if it doesn’t have dedicated experts in-house?

Jason: Healthcare leaders needing cloud security support may consider working with a strategic partner or managed services provider. A trusted team of experienced advisors can help you better understand your responsibilities, configure your environment correctly, implement and manage vigorous controls, and continuously improve your security posture to respond to the ever-evolving landscape.