The Cybersecurity and Infrastructure Security Agency recently required federal agencies to take emergency action to protect against actively exploited vulnerabilities in the Ivanti Connect Secure and Ivanti Policy Secure remote access gateways.

In addition, CISA, the FBI and Environmental Protection Agency recently published a best practices guide for water and wastewater system incident response.

“These alerts primarily address the government and water and waste water sectors,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “However, they identify cyber vulnerabilities and defensive measures that have relevance for the health care sector. Although the CISA emergency directive does not apply to private sector organizations, it would be prudent for hospitals and health systems to identify instances of Ivanti present in their networks or those of business associates that have network or data access, to ensure the remediation steps in the alert are followed promptly. The water and wastewater guide provides practical incident response guidance for operational technology and for hospitals and health systems that operate their own water and wastewater treatment facilities and will help them in assessing the cyber readiness of their external water and waste water treatment facilities for emergency preparedness planning purposes.” 

For more information on this or cyber and risk matters contact Riggi at jriggi@aha.org. For the latest cyber and risk threat information and resources visit www.aha.org/cybersecurity
 

Related News Articles

Headline
“Even before the recent Change Healthcare cyberattack that has left some hospitals fronting millions of dollars in extra costs, a perfect storm of complex…
Headline
The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center (HC3) April 5 released an advisory on the top 10 ransomware groups…
Headline
The AHA has been made aware of a validated IT help desk social engineering scheme that uses the stolen identity of revenue cycle employees or employees in…
Headline
For cybercriminals, the backdoor into the protected systems of hospitals and health systems often comes via a third party. In this second of a two-part…
Headline
The Department of Health and Human Services’ Office of the National Coordinator for Health Information Technology March 27 released for comment through May 28…
Headline
In this first of a two-part conversation with experts from Providence, Adam Zoller, chief information security officer, and Katie Adams, cybersecurity director…