Digital health systems should be treated as critical infrastructure

eHealth News
1

NEWS - eHealthNews.nz editor Rebecca McBeth

This is a companion discussion topic for the original entry at https://www.hinz.org.nz/news/721424/
2

Roman, a certified ethical hacker with more than 10 years’ experience in health IT security, does not agree with recent chatter on social media and Health NZ’s position on the MediMap incident, which places sole responsibility for security on platform vendors.

“I do not agree that any organisation should ever be solely responsible: cybersecurity will always be a shared responsibility” he tells eHealthNews.

I couldn’t agree more - it absolutely needs to be a shared responsibility, or we won’t do it well.

This is no different to clinical care, where healthy shared responsibility across the team caring for a patient generally leads to good outcomes (and sidesteps disasters).