The View From NCS Technologies

VDI & the Healthcare Data Breaches

Posted by John Callahan on Mar 26, 2015 2:17:00 PM

Healthcare_imageVDI and desktop virtualization are increasingly being considered as an important tool as data breaches continue to be discovered in the healthcare industry.

Everyone has heard about the breach involving Anthem, Inc., the second biggest health insurer in the U.S. It affects some 80 million customers and employees and is said to be the largest hack to a healthcare entity ever. Either you personally are affected or you know someone who is.

But Anthem isn't alone. Just in the past year, there are many other healthcare organizations reporting sizable breaches. They include Montana Department of Public Health and Human Services, Texas Health and Human Services, and Community Health Systems, to name a few.

Organizations of All Sizes Are Vulnerable

The reality is that healthcare providers of all sizes are vulnerable. Hospitals are especially targeted and in need of strong security.

I found a recent news item especially interesting in this context. According to a TransUnion Healthcare report, more than half of recent hospital patients are willing to switch healthcare providers if their current provider undergoes a data breach. And the younger you are (and likely more savvy about computers and the internet), the more likely you are to ditch your provider for poor performance.

The Damage to Organizations Is Immediate -- and Expensive 

Data breaches are painful for everyone. Looking at the healthcare provider, if the organization is large enough, class-action lawsuits may be filed in the first 24 hours after public notification. But beyond the courtroom, there is also the inevitable damage to reputation and brand, and the lost productivity of implementing forensics, remediation and regulatory compliance (HIPAA Privacy and HIPAA Security rules). In short, this an expensive nightmare that can and should be avoided. 

IT administrators must consider all the places in the network where Protected Health Information (PHI) and electronic PHI (ePHI) are gathered and stored. Strategies for protecting the datacenter can be implemented at the server but the challenge remains about keeping ahead of threats at the desktop level.

Zero Clients Help Solve the Data Breach Puzzle

One of the most promising approaches involves protecting sensitive information with zero clients at the end point. Healthcare providers are constantly accessing sensitive patient records with very personal information.  Zero clients allow you to enable a remote or mobile worker and still comply with HIPAA, PHI and ePHI by restricting the ability to download and store data locally.  Nothing stored, nothing lost.

In a nutshell, zero client computing provides strong security on the front lines because it has no hard drive, no OS, because no persistent user data is stored and no antivirus is needed. Until now, zero client desktops were not easily moved. But today, the industry's first mobile zero client laptop is generally available. This provides healthcare workers even more versatility and convenience, while maintaining the strong security necessary for protected information.

If you would like to learn more about zero clients and how they help solve the data security problems in today’s data-driven world of healthcare, download our brochure on Protecting Healthcare Information.

Download the Brochure

Topics: VDI, Healthcare