Balancing Security and Access in Healthcare

This whitepaper discusses the challenges faced by Chief Information Security Officers (CISOs) and security professionals in the healthcare sector regarding the protection of sensitive data while ensuring efficient access for clinicians. It outlines the increasing threat of cyberattacks and the complexities introduced by a mobile workforce, particularly in light of the COVID-19 pandemic. The document highlights that compromised credentials are a significant cause of data breaches, with 20% of incidents attributed to this issue. The paper emphasizes the concept of 'security friction,' where complex password requirements can hinder clinicians' ability to access necessary information quickly, potentially leading to workarounds that compromise security. It presents solutions such as multifactor authentication and single sign-on (SSO) systems that enhance security without burdening healthcare providers, allowing them to focus on patient care while maintaining robust data protection measures.