Cybersecurity threats and preparedness: Implications for dental schools.
behavioral sciences
cost
dental care access
dental faculty
economics of dental education
education
ethics
faculty
health care access
health care systems
patient affairs
patient care management
patient safety
professional interest
professional responsibility
Journal
Journal of dental education
ISSN: 1930-7837
Titre abrégé: J Dent Educ
Pays: United States
ID NLM: 8000150
Informations de publication
Date de publication:
27 Oct 2024
27 Oct 2024
Historique:
revised:
03
10
2024
received:
10
09
2024
accepted:
14
10
2024
medline:
28
10
2024
pubmed:
28
10
2024
entrez:
28
10
2024
Statut:
aheadofprint
Résumé
Cybersecurity threats are a growing concern in healthcare, where digital systems now underpin patient care, financial management, and educational operations. A cybersecurity breach in a Dental school environment can have widespread consequences to the mission of the school-patient care, research, education and service. For dental school administrators, these risks highlight the necessity of robust cybersecurity measures. For student learners, the impact may include interruptions to their education. For patients, it could mean compromised personal data and reduced access to clinical care. While many sectors have responded to increasing cyber threats by enhancing their defenses, healthcare and dental schools, often lag in implementing necessary protections. This emphasizes the need for proactive measures, such as regular system audits, advanced encryption methods, and ongoing cybersecurity training for administrators and students alike, to mitigate future risks and safeguard institutional integrity.
Sections du résumé
BACKGROUND
BACKGROUND
Cybersecurity threats are a growing concern in healthcare, where digital systems now underpin patient care, financial management, and educational operations. A cybersecurity breach in a Dental school environment can have widespread consequences to the mission of the school-patient care, research, education and service. For dental school administrators, these risks highlight the necessity of robust cybersecurity measures. For student learners, the impact may include interruptions to their education. For patients, it could mean compromised personal data and reduced access to clinical care.
RESULTS & CONCLUSION
CONCLUSIONS
While many sectors have responded to increasing cyber threats by enhancing their defenses, healthcare and dental schools, often lag in implementing necessary protections. This emphasizes the need for proactive measures, such as regular system audits, advanced encryption methods, and ongoing cybersecurity training for administrators and students alike, to mitigate future risks and safeguard institutional integrity.
Types de publication
Journal Article
Langues
eng
Sous-ensembles de citation
IM
Informations de copyright
© 2024 The Author(s). Journal of Dental Education published by Wiley Periodicals LLC on behalf of American Dental Education Association.
Références
University of Michigan Public Affairs. “August 2023 data incident.” Accessed July 7, 2024. Available from: https://publicaffairs.vpcomm.umich.edu/key‐issues/august‐2023‐data‐incident/
Wimmer D. Memo from Michigan Department of the Attorney General. “AG Nessel re‐issues data breach alert following University of Michigan Network infiltration.” 2023. Accessed June 7, 2024. Available from: https://www.michigan.gov/ag/news/press‐releases/2023/10/24/ag‐nessel‐reissues‐data‐breach‐alert‐following‐university‐of‐michigan‐network‐infiltration
Newman LH. A ransomware attack has struck a major US hospital chain. 2020. Accessed June 7, 2024. Available from: https://www.wired.com/story/universal‐health‐services‐ransomware‐attack/
Davis J. UHS ransomware attack cost $67M in lost revenue, recovery efforts. 2021. Accessed June 7, 2024. Available from: https://healthitsecurity.com/news/uhs‐ransomware‐attack‐cost‐67‐million‐in‐recovery‐lost‐revenue
Zitzmann NU, Matthisson L, Ohla H, Joda T. Digital undergraduate education in dentistry: a systematic review. Int J Environ Res Public Health. 2020;17(9): 3269. https://doi.org/10.3390/ijerph17093269
Kruse CS, Frederick B, Jacobson T, Monticone DK. Cybersecurity in healthcare: a systematic review of modern threats and trends. Technol Health Care. 2017;25(1): 1‐10. https://doi.org/10.3233/THC‐161263
Askarifar S, Rahman NAA, Osman H. A review of latest wannacry ransomware: actions and preventions. J Eng Sci Technol. 2018;13: 24‐33.
Safi A, Singh S. A systematic literature review on phishing website detection techniques. J King Saud Univ. 2023;35(2): 590‐611.
de Neira AB, Kantarci B, Nogueira M. Distributed denial of service attack prediction: challenges, open issues and opportunities. Comp Netw. 2023;222: 109553.
Javaid M, Haleem A, Singh RP, Suman R. Towards insighting cybersecurity for healthcare domains: a comprehensive review of recent practices and trends. Cyber Security Appl. 2023;1: 100016.
Mejía‐Granda CM, Fernández‐Alemán JL, Carrillo‐de‐Gea JM, García‐Berná JA. Security vulnerabilities in healthcare: an analysis of medical devices and software. Med Biol Eng Comput. 2024; 62(1): 257‐273.
Parvej MF, Hoque MM, Kole DK. Survey on cyber‐security for healthcare system. In: International Conference on Frontiers in Computing and Systems, Singapore, 2023: 295‐306. Springer Nature.
Ponemon Institute. “Cybersecurity in healthcare.” 2022. Accessed June 7, 2024. Available from: https://www.proofpoint.com/us/cyber‐insecurity‐in‐healthcare
Jalali MS, Kaiser JP, Siegel M, Madnick S. The growing importance of cybersecurity for universities. J Inform Security Appl. 2019;48:102362.
Kruse CS, Frederick B, Jacobson T, Monticone DK. Cybersecurity in healthcare: a systematic review of modern threats and trends. Technol Health Care. 2017;25(1):1‐10.
O'Dowd E. Healthcare data breaches cost organizations $4 billion in 2019. HealthITSecurity. 2020. Available from: https://healthitsecurity.com/news/healthcare‐data‐breaches‐cost‐organizations‐4‐billion‐in‐2019
Koppel R, Metlay JP, Cohen A, et al. Role of computerized physician order entry systems in facilitating medication errors. JAMA. 2005;293(10): 1197‐1203.
Massachusetts Institute of Technology. “Cybersecurity for the education sector.” 2023. Accessed June 6, 2024. Available from: https://www.technologyreview.com/2023/05/15/1073107/cybersecurity‐for‐the‐education‐sector
Gomez MA, Shandler R. Cyber conflict and the erosion of trust. 2022. Accessed June 5, 2024. Available from: https://www.cfr.org/blog/cyber‐conflict‐and‐erosion‐trust
McLeod A, Dolezel D. Cyber‐analytics: modeling factors associated with healthcare data breaches. Decis Support Syst. 2018;108: 57‐68.
Gracco A, De Stefani A, Bruno G. Influence of new technology in dental care: a public health perspective. Int J Environ Res Public Health. 2023;20(7):5364.
Schwendicke F, Krois J. Data dentistry: how data are changing clinical care and research. J Dent Res. 2022;101(1): 21‐29.
Jalali MS, Russell B, Razak S, Gordon WJ. EARS to cyber incidents in health care. J Am Med Assoc Inform. 2018;26(1):81–90.
Cybersecurity and Infrastructure Security Agency of the Government. “Guide to getting started with a cybersecurity risk assessment.” Accessed June 7, 2024. Available from: https://www.cisa.gov/sites/default/files/2024‐01/22_1201_safecom_guide_to_cybersecurity_risk_assessment_508.pdf
Aldawood H, Skinner G. Contemporary cyber security social engineering solutions, measures, policies, tools and applications: a critical appraisal. Int J Secur. 2019;10(1):1‐15.
Wang W, Lu Z. Cyber security in the Smart Grid: Survey and challenges. Comp Netw. 2013;57(5):1344‐1371.
Das S, Wang B, Tingle Z, Camp LJ. Evaluating user perception of multi‐factor authentication: a systematic review. 2019. Accessed September 23, 2024. doi: 10.48550/arxiv.1908.05901
Killcrece G, Kossakowski K, Ruefle R, Zajicek M. State of the practice of computer security incident response teams (CSIRTs). (Technical Report CMU/SEI‐2003‐TR‐001). 2003. https://doi.org/10.1184/R1/6584396.v1
Knapp KJ, Ferrante CJ. Policy awareness, enforcement and maintenance: critical to information security effectiveness in organizations. J Manag Policy Pract. 2012;13:66‐80.
National Institute of Standards and Technology. NIST SP 800‐115: Technical Guide to Information Security Testing and Assessment. CreateSpace Independent Publishing Platform; 2008.
Scarfone K, Souppaya M, Sexton M. Guide to Storage Encryption Technologies for End User Devices. National Institute of Standards and Technology; 2007. https://doi.org/10.6028/NIST.SP.800‐111
Healthcare Information and Management Systems Society (HIMSS). “Encryption in Healthcare: What You Need to Know.” Available from: https://www.HIMSS.org
Cartwright AJ. The elephant in the room: cybersecurity in healthcare. J Clin Monit Comput. 2023;37(5):1123‐1132.
U.S. Department of Health & Human Services. Guidance regarding methods for de‐identification of protected health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA) privacy rule. 2020. Available from: https://www.hhs.gov/hipaa/for‐professionals/privacy/special‐topics/de‐identification/index.html
Office for Civil Rights (OCR). “Summary of the HIPAA Privacy Rule.” U.S. Department of Health & Human Services. 2013. Available from: https://www.hhs.gov/hipaa/for‐professionals/privacy/laws‐regulations/index.html