Human-directed and naturally occurring events are becoming more frequent and intense, and can threaten a health system’s ability to maintain continuity of care. These sequences can increase the likelihood of a substantial disruption to a healthcare organization’s operational technology and critical infrastructure.
The automatic and programmatic delivery of modern OT and critical infrastructure presents another concern. Systems such as power, water and water reclamation are highly automated but, in many cases, are vulnerable to security risks. Several factors contribute to this lack of robust security, including a lack of governance over third parties that manage and operate crucial systems, along with outdated legacy equipment that organizations are often unable to update in the challenging economic environment for healthcare.
While the situation may seem bleak, the healthcare industry can protect its OT if organizations take the necessary steps to secure critical infrastructure that will promote continuity of care.
DISCOVER: How can organizations protect critical infrastructure in an evolving threat landscape?
The Current State of Healthcare OT and Critical Infrastructure
Technology is often the last thing organizations focus on when thinking about OT and critical infrastructure planning, but that is incredibly short-sighted. In an efficient clinical environment, proper functioning OT and critical infrastructure work together.
When a patient arrives at the emergency department through the ambulance bay, it must be well lit. The automatic doors must open. Once the patient is inside the hospital, the elevators must have power to transport them to the proper floor. From the time a patient enters a facility to their initial triage and treatment, critical infrastructure must be ready to provide a continuum of care.
Modern health system campuses rely on critical resources such as power, backup generators and water to support clinicians in their efforts to provide care. For example, when Hurricane Helene caused devastating floods in western North Carolina in September 2024, it was a stark reminder that when a hospital loses water and power, it is no longer viable. It it can no longer sanitize tools, wash linens or distribute critical services through a centralized system. A power outage and lack of sufficient battery backups could also disrupt the delivery of medications through automated medical devices.
Click the banner below to learn why cyber resilience is essential to healthcare success.
Matt Sickles