Healthcare services are prime targets for cyber criminals because of the potential value of health data. There are several steps your organisation can take to protect against and minimise the impact of cyberattacks, including:
- Keep your software up to date and do not allow the installation of unapproved or unverified software programs on your networks
- Use strong passphrases
- Turn on multi-factor authentication
- Back up your data regularly
- Never respond to phishing emails, texts and calls. If you or a staff member shares confidential information with a phishing scam, such as username and password, change the compromised password immediately
- If you fall victim to ransomware, do not pay the ransom. Call the Australian Cyber Security Centre 24/7 hotline on 1300 CYBER1 (1300 292 371)
- Subscribe to the Australian Digital Health Agency’s Digital Health Cyber Security Alerts.
Training and resources
- Cybersecurity and password managers
- Australian Digital Health Agency’s cyber security web pages
- Digital Health Security awareness eLearning Course
- Australian Digital Health Agency’s guide Selecting secure IT products and Services – Questions to ask you IT vendors
- Cybersecurity in Primary Health webinar (November 2023 recording)
- Cyber Security for your Practice webinar (March 2023 recording)
Murray PHN’s Digital Health Team can provide resources and referral information to assist practices to understand cybersecurity. Email digitalhealth@murrayphn.org.au for support.
Only a third of Australian Healthcare organisations embed cyber security awareness and training into their organisational policies and procedures.
– Cyber Security Across the Australian Healthcare Sector 2018