Health systems adopt zero trust approach to secure networks, devices

Healthcare providers are increasingly moving towards a "never trust, always verify" approach, also known as the "zero trust" security model, in order to protect networks and devices against an expanding threat landscape. As one of the most targeted and breached industries, and the one holding on to the most sensitive type of data, zero trust networks can help hospitals strengthen cybersecurity inside and outside of the network. The key objective is achieving a state where you are making sure every transaction is being conducted by an entity with the authority to do it, said Dr. Saif Abed, founding partner and director of Cybersecurity Advisory Services. This process of making sure that both those within and outside your network are being held accountable is a very powerful way to get control of a network." He explained that taking a zero trust approach ensures that you are validating the behavior of an endpoint and reducing the risk it presents to itself, other endpoints and ultimately patient safety. We have so many devices now within a network that it can be a real nightmare to manage and keep track of them all," Abed noted. "Misconfigurations, default settings and inherent vulnerabilities make it all too likely that these endpoints will be exploited as a means to attack a network.