Security is the basic challenge faced by the healthcare organizations, as they are gradually moving data and systems to cloud. The Head of the data center, cloud security, and marketing at Check Point Software Technologies, Donald Meyer, said, “Several standard practices used on our premises generally do not get implemented in the cloud; this is the general challenge faced by an organization that shifts data to the cloud. A lot of time and money is invested by the healthcare organizations to develop a very vigorous infrastructure in order to secure physical networks they possess, but when they transfer to the cloud, they are likely of not getting those similar technologies over.”
The security professionals should be knowing about how security is developed for physical networks as well as who is accountable for what in a cloud setting whenever they consider securing cloud assets from any ransomware. Several techniques are used by the cybercriminals to analyze the Internet for IP addresses that originated by the cloud providers. Whenever new IP ranges and IP addresses are seen by the criminals, they instantaneously start to examine what type of security is used and how the infrastructure is systematized so they can begin the planning of a targeted attack. Social media is another way to get to cloud-based data and systems by the cybercriminals.
According to Meyer, the individuals who are now describing the cloud infrastructure, the cloud architecture or the dev-ops, are not essentially skilled with a security discipline, and most of the time they are doing things that have protection implications. Thus, the needed superior practices for protection may not be deciphered into these new elements. As for technological protection solutions to secure the cloud, they should be developed quite explicitly with the cloud in mind, to some degree, which can be ignored as healthcare managements get gradually comfortable with protection systems for physical networks.
Meyer further said, “To function with could it should be equally elastic, automatic, and dynamic as a cloud. You do not need something that is manually exhaustive as it can slow down the cloud in what it is preeminently utilized for. So, basically, you do not want to be sealed into a technology that will hamper the cloud’s potential to offer its great assistances, or, simultaneously, provide access to malware that can transmit itself within that cloud and possibly find a mode to return to your offices.”
As per Meyer, with cloud and physical networks in functioning, healthcare CISOs CIOs should have the potential to observe everything from a sole point view for reliable implementation no matter the location.
