关键词: DICOM PACS cybersecurity data breach device vulnerabilities

来  源:   DOI:10.1067/j.cpradiol.2024.07.010

Abstract:
To improve awareness and understanding of cybersecurity threats to radiology practice and better equip healthcare practices to manage cybersecurity risks associated with medical imaging, this article reviews topics related to cybersecurity in healthcare, with emphasis on common vulnerabilities in radiology operations. This review is intended to assist radiologists and radiology administrators who are not information technology specialists to attain an updated overview of relevant cybersecurity concepts and concerns relevant to safe and effective practice of radiology and provides a succinct reference for individuals interested in learning about imaging-related vulnerabilities in healthcare settings. As cybersecurity incidents have become increasingly common in healthcare, we first review common cybersecurity threats in healthcare and provide updates on incidence of healthcare data breaches, with emphasis on the impact to radiology. Next, we discuss practical considerations on how to respond to a healthcare data breach, including notification and disclosure requirements, and elaborate on a variety of technical, organizational, and individual actions that can be adopted to minimize cybersecurity risks applicable to radiology professionals and administrators. While emphasis is placed on specific vulnerabilities within radiology workflow, many of the preventive or mitigating strategies are also relevant to cybersecurity within the larger digital healthcare arena. We anticipate that readers, upon completing this review article, will gain a better appreciation of cybersecurity issues relevant to radiology practice and be better equipped to mitigate cybersecurity risks associated with medical imaging.
摘要:
提高对放射学实践的网络安全威胁的认识和理解,并更好地装备医疗保健实践,以管理与医学成像相关的网络安全风险。本文回顾了与医疗保健中的网络安全相关的主题,强调放射学操作中的常见漏洞。这篇综述旨在帮助不是信息技术专家的放射科医生和放射科管理员获得相关网络安全概念的最新概述,以及与放射学安全有效实践相关的问题,并为有兴趣了解医疗保健环境中成像相关漏洞的个人提供简洁的参考。随着网络安全事件在医疗保健领域变得越来越普遍,我们首先回顾了医疗保健领域常见的网络安全威胁,并提供了有关医疗保健数据泄露发生率的最新信息,强调对放射学的影响。接下来,我们讨论了如何应对医疗数据泄露的实际考虑,包括通知和披露要求,详细阐述各种技术,组织,以及可以采取的个人行动,以最大程度地减少适用于放射学专业人员和管理员的网络安全风险。虽然重点放在放射学工作流程中的特定漏洞上,许多预防或缓解策略也与更大的数字医疗领域的网络安全相关。我们预计读者,在完成这篇评论文章后,将更好地了解与放射学实践相关的网络安全问题,并更好地减轻与医学成像相关的网络安全风险。
公众号