Saranath

I think EMR should be design to have some benefits to the users, such as some alert/warning, automated calculation. This may encourage the use of the system.

Wow! Great definitions. Thanks!

Interesting examples of big data. Thanks everyone!

Thanks everyone for sharing! Very interesting projects. Health IT system or project can be useful in many ways (reduce human errors, improve the utilization of data, reduce time spend in working process, etc.). However, the organization has to manage the change in the organization when the new system is developed and implemented (work load,…[Read more]

It’s interesting that you brought up the issue of inequity. In developing country, we have to consider this issue a lot as not all people can access to a smartphone or sometimes data plan.

Thanks all for sharing!

Agree with you all that beside educating people, the prevention measures should be implemented on the system such as filter emails.

A regular backup is also important to avoid the impact of ransomware. If the hospital has a proper backup, it could retrieve the data and HIS system back in time.

@Anawat- Good point. Most companies have policy and regulations about data security and privacy. However, the policy needs proper enforcement. Staff should be trained regularly about the policy, SOPs, and regulations.

Thanks everyone for sharing!

I agree. The organization should pay more attention on cybersecurity. Sometimes an organization doesn’t realize the important of cybersecurity and doesn’t want to invest money on this. But the consequence of data breach may cost much higher than the initial investment.

Thanks for sharing!

Agree with you all. I think not everyone in most organization really know about ransomware. Increase awareness plus system protection measures would be really helpful to prevent the attack.

Thanks for sharing and all of your comments. Only few misconfigurations could create a large impact.

Thanks for sharing! Your organization is not alone. I have seem the same problems in many hospitals. I’m not sure if the system allow hybrid methods, i.e. allow both typing the information and keeping the handwritten image. We may encourage your staff to use the “Real” EMR by typing information into the system first. I think this group is more…[Read more]

Educate and build awareness of people handling these paper-based information is very important. Most of the time, you may need to hire a professional company to destroy these papers.

Even though the data breach was due to third party error, we as the one who hire the vendor has to take responsibility for this incidence. It is important to check the company’s performance and record, also pay attention on the contract agreement with the vendor company.

This shows that it is important for health informaticians to understand concept of system and database development, configuration. So that you can detect suspicious misconfiguration that may lead to data breach incidence.

What is the main cause of this ransomware attack? Was it due to human error, system error, or third party vendor error?

It is interesting that the main cause of data breach is due to a technical error in the system that was developed to make the system more secure (multi-factor authentication).