The MHA released a new episode of the MiCare Champion Cast exploring what happens when a hospital or health system experiences a cyberattack featuring Jack Kufahl, chief information security officer at Michigan Medicine.
In his role, Kufahl is responsible for planning, developing, implementing, and maintaining information assurance activities across the academic medical center. Although the health system wasn’t majorly impacted by the Change Healthcare breach, Kufahl shared how his team responded and valuable insight on how to improve cybersecurity measures.
“I think one of the most important things any hospital or healthcare organization can do is start establishing a long-term [cybersecurity] framework so that you can measure improvement over time,” said Kufahl, noting there are many accessible resources that accommodate monetary limitations.
According to the FBI, healthcare organizations are the top target of cybercriminals across the globe and attacks have increased significantly in the last two years. On top of the significant financial burden this can cause for a hospital, many face penalties that further threaten patient access to care – especially among small and rural providers serving vulnerable communities.
“Some companies don’t have the ability to invest in cybersecurity and hard choices have to be made,” said Kufahl, who also serves as one of the incorporating officers and board members of the Michigan Healthcare Cybersecurity Council. “If you penalize the victims of a cybersecurity crime, we’re not leveraging the legislative angle to our benefit.”
Fostering partnerships and collaborating is another way Michigan Medicine stays proactive in their cybersecurity efforts. Kufahl noted that working with CyberForce|Q, an MHA Endorsed Business Partner (EBP), helps his team regularly assess security programming and stay connected with a broad network of experts across industries.
“It is really important to not be alone in cybersecurity in healthcare,” said Kufahl. “The tone and temperature of collaborating across companies has improved dramatically…that is the most meaningful fabric we can reinforce. I would encourage anyone to reach out and engage.”
The MHA is partnering with CyberForce|Q to offer the Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop 9 a.m. – Noon May 22. The in-person event is free of charge for MHA member organizations and invitees. Throughout the workshop, attendees will explore three critical phases of a simulated cyberattack.
The episode is available to stream on Spotify, Apple Podcasts, SoundCloud and YouTube. Those interested in learning more about CyberForce|Q or the MHA EBP program can visit the business services webpage or contact Rob Wood at the MHA. Questions or idea submissions for future MiCare Champion Cast episodes can be sent to Lucy Ciaramitaro at the MHA.