Intelligent CIO Middle East Issue 110 | Page 53

CASE STUDY

Further insights by Kimberly Pierce and Rajiv Ganapathy

How has migrating your Electronic Health Records to Oracle Cloud Infrastructure enhanced the overall cybersecurity posture of King ’ s College Hospital London in Dubai ?
Kimberly Pierce : In healthcare , particularly , cybersecurity is a major concern . We have seen the impact of cyberattacks firsthand , especially in the UK recently , where a cyberattack directly affected patient care . One of the risks of moving to an Electronic Medical Record system is that if it is compromised , you can suddenly lose access to critical information needed for patient care .
All of us are now focused on how we can maximise cybersecurity while minimising the chances of cyberattacks . The number of attacks we have experienced has risen exponentially , according to our data . is less space for anyone to breach this kind of environment . The threat protection includes about six to eight layers , so in terms of securing patient data , we are in a much better position after moving to the cloud .
In the context of the constantly evolving cyberthreat landscape , how does King ’ s College Hospital London in Dubai ensure that its network security protocols remain ahead of emerging threats ?
Rajiv Ganapathy : Cyberthreats are constantly evolving . The hackers and those posing cybersecurity risks are always finding new ways to challenge us , so we must continually adapt to keep up . In that regard , we have not only met the necessary requirements but have gone above and beyond .
Migrating to Oracle Cloud was a key decision for us because it enhances cybersecurity by adding multiple layers of protection . While no system is completely immune to attacks , as technology always evolves , this is currently the best solution available to safeguard medical health records .
We have implemented endpoint detection and response , EDR into our networks , and more recently , we are working on extended detection and response , XDR . These systems use algorithms that can detect anomalies , such as Distributed Denial of Service , DDoS attacks .
That is why we chose Oracle Cloud . Additionally , Oracle Health , our EMR provider , has undergone one of the most thorough due diligence processes regarding cloud compatibility and security protocols . This ensures that each step in the system ’ s pathway is much safer . Although there are other options on the market , most of us are using Oracle Health as our EMR system .
What cybersecurity measures has King ’ s College Hospital London in Dubai implemented to protect sensitive patient data in the cloud , particularly with the real-time threat detection and monitoring provided by Oracle Health ?
Rajiv Ganapathy : Moving to the cloud was a very conscious decision for us , and it comes with its own set of checks and balances . As you know , Oracle Cloud Infrastructure holds SOC 2 certification and ISO 27001 compliance , so it meets all the necessary checks and balances needed for protecting data .
One key advantage is that their databases offer autonomous patching . When we were on-premises , we had to constantly stay on top of updates and patches , which meant there was always the risk of missing something . That was one of the challenges of hosting our own data . Now , on the cloud , we have greater flexibility , along with encryption and other security features that Oracle Cloud Infrastructure provides .
Oracle Cloud also comes with built-in real-time threat detection , as part of its out-of-the-box setup . With multiple security layers , there
With automation and Machine Learning built in , they can sift through millions of logs to identify potential threats and stop them before they penetrate the network .
These measures have been integrated into our network , so internally , we are doing everything we can to secure ourselves . Even though we are on the cloud , we are still the gateway for all these processes . Our security is in place and continues to be enhanced .
Kimberly Pierce : Another area we focus on , besides the technical aspects , is recognising that some things will inevitably slip through , as staff are constantly using computers . We now have alerts that pop up for everything . I even get frustrated sometimes when I cannot access certain things because of the security blocks in place .
We have put a lot of effort into educating staff about phishing , which is becoming increasingly difficult to keep up with . The sheer volume of attempts , from post office fraud to bank fraud , is overwhelming , and they are incredibly clever in how they try to trick people . One thing we do is send staff updates on the latest threats , even if they are not relevant to their work environment . This also helps protect them at home .
We know we must stay on top of these risks . Oracle Cloud Infrastructure has provided us with a strong foundation , but we also rely on them to continually refine and update their security as hackers become more sophisticated in the future . That is why we cannot afford to take our eyes off the ball . p
www . intelligentcio . com INTELLIGENTCIO MIDDLE EAST 53