Technical Infrastructure in Healthcare Facilities Faces the Challenge of Digital Security and Cybersecurity

Due to medical confidentiality, patient records and all the personal information they contain are, of course, particularly sensitive. Just like the private sector, operators of vital importance (OVIs) are facing evolving security threats. Whereas in the past they were exposed to physical attacks such as break-ins or sabotage, malicious acts are now increasingly intangible, particularly in the cyber domain. Cybersecurity is a collective challenge: simply opening email attachments or using infected USB drives can provide entry points for hackers. More generally, every connection or access point to an IT system is a potential vulnerability if cybersecurity measures are insufficient. As technical systems become increasingly digitized, their operation requires the collection, processing, analysis, and exchange of ever-greater volumes of data. However, outdated protocols make these technical systems vulnerable because they have lacked cybersecurity for years. This therefore requires a profound shift in mindset, moving from maintaining equipment in operational condition to maintaining it in a secure condition. The goal is to ensure the proper functioning of the building and its systems so that patients can receive the necessary care. In a hospital, the IT system serves as the backbone for both medical and technical operations. The practical consequences of inadequate security at a facility are countless: by gaining access to the system, it is possible to control access to room or operating room locks, disable an operating room, shut off the heating in the middle of winter, or turn off the air conditioning during a heat wave… In short, it is possible to paralyze the operations of a hospital or clinic and thereby hinder the ability of doctors and healthcare staff to provide care.