Dmitry Sotnikov, Chief Product Officer at Cayosoft
Ransomware attacks have surged alarmingly across various sectors, particularly impacting the healthcare industry more than any other critical infrastructure sector in 2022, as highlighted in the FBI’s 2023 Internet Crime Report. Given these alarming statistics and the profound repercussions on patient care, prioritizing cybersecurity measures is now paramount for healthcare organizations. This necessity is especially urgent when it comes to fortifying Microsoft infrastructure and identity management systems such as Active Directory (AD), which underpins approximately 90% of large businesses and virtually all healthcare entities. Unfortunately, the report indicates that a staggering 88% of Microsoft clients affected by ransomware had not adopted the security best practices related to Active Directory and its cloud equivalent, Entra ID, as noted in the Microsoft Digital Defense Report 2022.
Today, the inextricable link between securing healthcare IT infrastructure and ensuring quality patient care has become undeniable, making investment in identity systems more urgent than ever. Yet, despite their critical importance, initiatives to safeguard these systems often suffer from inadequate funding. Traditionally viewed as mere ‘necessary plumbing’ within IT operations to meet basic requirements, identity management often doesn’t receive the attention it deserves. To secure the essential funding for protecting these vital IT infrastructures, communication between IT departments, executive leadership, and the board is crucial. However, a significant challenge arises from the fact that IT teams and C-level executives often speak vastly different languages, necessitating a coordinated effort to bridge this communication divide and attain the necessary support for cybersecurity investments.
The urgency for immediate action is unmistakable: ransomware incidents can cripple every facet of a healthcare organization’s operations, jeopardizing their ability to serve patients effectively. These disruptions can result in doctors being unable to access critical patient records, operational halts in surgical rooms, and interruptions in prescription access. Faced with such attacks, healthcare providers frequently revert to labor-intensive manual processes, substantially delaying critical workflows and increasing the likelihood of errors. Moreover, beyond operational setbacks, ransomware incidents incur severe legal, financial, and reputational damage, disheartening philanthropic supporters who may be distressed by the realization that their contributions are being allocated toward ransom payments rather than organizational advancements.
Establishing transparent communication between IT teams and executives plays an essential role in minimizing cyber risks and safeguarding patients and the organization as a whole. Providing executives with comprehensive information enables them to make educated decisions, acquire necessary funding, and equip IT teams with the resources essential for implementing robust cybersecurity protocols that protect both caregivers and patients alike. Here are some best practices designed to catalyze these vital conversations:
1. Take a storytelling approach.
“What happened to them could easily happen to us.” Begin discussions with compelling, real-world narratives that vividly illustrate how cybersecurity breaches have affected other healthcare institutions. Present the story from diverse perspectives — including patients, doctors, IT staff, and executive leadership — to exemplify the vast implications of neglecting cybersecurity. Incorporate relevant industry statistics to demonstrate that these examples are not isolated but signify a growing trend.
2. Speak in business terms.
Understanding your audience is vital in any communication. To capture the attention of C-level executives, frame discussions around financial impacts, ROI, and business objectives. Emphasize how breaches can harm reputations and inflate operational costs, ultimately affecting revenues and patient care. For instance, if a ransomware incident were to incapacitate a mid-sized healthcare organization’s Active Directory, just one day of downtime could lead to losses exceeding $1.5 million in labor expenses — and without a robust recovery strategy, reinstating AD could take days or even weeks. Subsequently, illustrate the substantial long-term ROI associated with preventing such scenarios through operational, financial, legal, and reputational lenses.
3. Articulate your current infrastructure’s limitations.
It’s critical for IT teams to make C-level executives aware that their existing disaster recovery plans may not suffice against modern cyber threats. When ransomware attacks bring systems crucial to patient care and doctors’ workflow to a standstill, every second counts. Often, outdated disaster recovery solutions fail to protect against significant cyber threats, leaving vital operations exposed to damaging repercussions. Clearly articulating the current state of security measures, compared to the required standards, will serve as a compelling catalyst for C-suite action.
4. And most importantly, start now.
In the realm of ransomware, the inevitable question is not if an attack will occur, but when. Delaying action until after a breach materializes is not wise — adopting a proactive stance now, along with initiating ongoing discussions about this critical issue, is imperative. By leveraging real-world examples to display the multifaceted consequences of such attacks, you can emphasize the urgency of the situation. Show foresight by presenting a clear plan detailing how the recommended investments will not only avert attacks but also facilitate rapid recovery to mitigate impacts should such events occur.
The escalating threat of cyber attacks against healthcare providers poses an immediate risk to patient welfare. Fortunately, contemporary identity management and disaster recovery methodologies can strengthen the healthcare sector’s defense against cyber threats while enhancing the resilience of core IT systems. The IT department within a healthcare organization acts as its strongest ally in ensuring necessary security measures and systems are effectively implemented. Ultimately, clear and impactful communication with decision-makers at the C-suite level is crucial for healthcare institutions to safeguard both their operations and the wellbeing of their patients.
About Dmitry Sotnikov
Dmitry Sotnikov serves as the Chief Product Officer at Cayosoft, an innovative platform specializing in Microsoft Active Directory management, monitoring, and recovery. He drives the vision, strategy, design, and execution of the company’s software solutions, ensuring they align with market needs and deliver exceptional value to users. With over 20 years of experience in enterprise IT software, cloud computing, and security, Dmitry has occupied key positions at renowned organizations including Netwrix, 42Crunch, WSO2, Jelastic, and Quest Software. His academic accomplishments feature MA degrees in Computer Science and Economics, along with Executive Education from the Stanford University Graduate School of Business. Additionally, Dmitry is a member of the Advisory Board at the University of California, Riverside Extension, and has earned 11 consecutive MVP accolades from Microsoft.
**Interview with Dmitry Sotnikov, Chief Product Officer at Cayosoft**
**Editor:** Thank you for joining us, Dmitry. Given the recent cyberattack on Change Healthcare and the alarming rise of ransomware attacks in the healthcare sector, what are your thoughts on the current threat landscape for healthcare organizations?
**Dmitry Sotnikov:** Thank you for having me. The recent incident with Change Healthcare underscores the critical vulnerabilities in our healthcare system. With ransomware attacks booming, particularly in healthcare, organizations must prioritize cybersecurity as inherently linked to patient care. A breach can disrupt critical services, compromise patient data, and significantly harm operational efficiency.
**Editor:** Absolutely. The FBI’s 2023 Internet Crime Report indicated that 88% of Microsoft clients affected by ransomware neglected essential security best practices. How can healthcare organizations begin to bridge this significant security gap?
**Dmitry Sotnikov:** First and foremost, prioritizing identity management systems like Active Directory is essential, as they form the backbone of most organizations, especially in healthcare. Organizations should adopt best practices immediately and ensure that cybersecurity is treated as a board-level concern, not just an IT issue. That means establishing communication between IT teams and executive leadership to discuss investments in security measures using terms that resonate with the C-suite.
**Editor:** Speaking of communication, you mentioned the importance of storytelling in your recommendations. Could you elaborate on that approach?
**Dmitry Sotnikov:** Certainly. Using real-world examples of breaches in healthcare can help convey the stakes involved and illustrate the potential consequences of inaction. Presenting these stories from the perspectives of various stakeholders — patients, doctors, and IT staff — can drive home the point that cybersecurity is a crucial aspect of patient care, not just a technical hurdle.
**Editor:** That’s a great angle. What specific strategies do you recommend for IT teams to explain their needs to executives effectively?
**Dmitry Sotnikov:** It’s crucial to speak in business terms. C-level executives care about the bottom line, so framing discussions around financial impacts, potential ROI, and how breaches might affect their reputation and operational costs is vital. For instance, the cost of one day of downtime due to a ransomware attack can be enormous — we’re talking potentially millions in lost labor and productivity.
**Editor:** Given this urgent need for action, what steps should organizations take right now to bolster their cybersecurity posture?
**Dmitry Sotnikov:** First, organizations need to assess their current cybersecurity infrastructure and disaster recovery plans. As we’ve seen, running outdated systems can leave you vulnerable. It’s also critical to create a culture of cybersecurity awareness across all levels of the organization. Proactively investing in cybersecurity measures, rather than waiting for an incident, is key. By preparing a strategic plan to address these threats, organizations can mitigate impacts should an attack occur.
**Editor:** Thank you, Dmitry. Your insights are invaluable, especially as we navigate the increasingly complex landscape of healthcare cybersecurity. As you mentioned, the need for immediate action is undeniable.
**Dmitry Sotnikov:** Thank you for the opportunity. It’s imperative we act quickly to ensure our healthcare systems are secure and can continue to provide care without disruption.
