Saranath

I agree. The organization should pay more attention on cybersecurity. Sometimes an organization doesn’t realize the important of cybersecurity and doesn’t want to invest money on this. But the consequence of data breach may cost much higher than the initial investment.

Thanks for sharing!

Agree with you all. I think not everyone in most organization really know about ransomware. Increase awareness plus system protection measures would be really helpful to prevent the attack.

Thanks for sharing and all of your comments. Only few misconfigurations could create a large impact.

Thanks for sharing! Your organization is not alone. I have seem the same problems in many hospitals. I’m not sure if the system allow hybrid methods, i.e. allow both typing the information and keeping the handwritten image. We may encourage your staff to use the “Real” EMR by typing information into the system first. I think this group is more…[Read more]

Educate and build awareness of people handling these paper-based information is very important. Most of the time, you may need to hire a professional company to destroy these papers.

Even though the data breach was due to third party error, we as the one who hire the vendor has to take responsibility for this incidence. It is important to check the company’s performance and record, also pay attention on the contract agreement with the vendor company.

This shows that it is important for health informaticians to understand concept of system and database development, configuration. So that you can detect suspicious misconfiguration that may lead to data breach incidence.

What is the main cause of this ransomware attack? Was it due to human error, system error, or third party vendor error?

It is interesting that the main cause of data breach is due to a technical error in the system that was developed to make the system more secure (multi-factor authentication).

Thanks everyone for your participation!

Yes. Mostly people is the main factor for the incidence.

I think not only Indonesia that is attacked with the fishing messages. I have seen this in Thailand and other countries too. Good example.

Thanks everyone for sharing! It seems that all of you prefer cloud server with several supporting reasons. For the service models, both PaaS and SaaS were selected— which may depends on the capability and programming skills of the IT officer in the hospital.

Thanks for giving the disadvantages side too.

Thanks! Let’s wait for others to respond.

When convincing with the executive board, the investment budgets and returns are the main factor for their decision making. You may need to prepare information regarding cost-benefit when presenting to them too.

I agree that scalability is another advantage of cloud service. I really like this option too.

When talking with the executives, money is the main interest. You may need to compare the initial and maintenance cost between physical and cloud servers – the cost should include both direct and indirect cost (for example if you need to hire another IT staff).

Thanks everyone for sharing!