Health Technology, Digital Healthcare
Article | September 7, 2023
The healthcare industry has become a prime target for cybercriminals in recent times.
According to The State of Ransomware in Healthcare 2023 report from Sophos, six in 10 healthcare organizations have been hit by ransomware in the last 12 months, up from 34% in 2021.
Among this uptick have been several headline-grabbing attacks. For example, Shields Health Care Group became the subject of the single-largest breach affecting any organization globally in April 2023, when 2.3 million patients of the Massachusetts-based medical services provider had their personal data stolen after a cybercriminal gained unauthorized access to the organization’s systems.
Meanwhile, in the UK, a ransomware attack on the University of Manchester occurred in June, affecting an NHS patient data set holding information on 1.1 million patients across 200 hospitals.
Critically, the wealth of data housed in healthcare networks, and the potential impact of data unavailability in healthcare, make the industry both attractive and lucrative to threat actors.
It’s no coincidence that the Sophos report shows the rate of encryption in the healthcare sector is at its highest level in recent years. Of those healthcare organizations which suffered a ransomware attack in 2023, 73% had their data encrypted – up from 61% in 2022. When cybercriminals can successfully take down hospital systems and/or encrypt patient data so it can’t be used, they can blackmail health service providers, demanding significant sums before reinstating systems and/or data availability.
Considering healthcare's critical role as the highest-stake industry in our society, where people's lives depend on its success, the likelihood of attackers achieving their goals is greater than in other sectors, as confirmed by the Sophos report. Indeed, of the 73% of healthcare organizations that had their data encrypted, 42% reported that they paid the requested ransom to recover data.
DSPT and the compliance burden
Without question, the security-related challenges in healthcare are mounting. Right now, industry organizations are operating against a backdrop of unprecedented operational and workforce pressures, spiralling demand for care and industrial action.
Moreover, there is a growing regulatory burden, with organizations continually asked to comply with evolving cybersecurity rules, battling with multiple compliance mandates at any given time.
Take the NHS as an example. According to the 2023 NHS Providers’ Regulation Survey, just over half (52%) of respondents said the regulatory burden on their trust had increased. And this is expected to ramp up further in the future, with the UK government setting out a new 2030 strategy aimed at bolstering cyber resilience in healthcare.
Among the compliance burdens that the NHS faces is the challenge of meeting the requirements of the newly updated Data Security and Protection Toolkit (DSPT).
Mandated to minimize cyber risks and enable healthcare providers to maintain a robust information security posture, the DSPT is not a simple checklist of security controls, but a comprehensive toolkit to evaluate current security maturity and establish a risk management programme.
Indeed, in more recent times, DSPT has moved away from being a guide for achieving certain levels of assurance, and toward a mandatory evidence-based system which demands NHS organizations align with 10 precise National Data Guardian (NDG) standards: 1. The organization assures good management and maintenance of identity and access control for its networks and information systems. 2. The organization closely manages privileged user access to networks and information systems supporting essential services. 3. The organization ensures passwords are suitable for the information being protected. 4. Process reviews are held at least once a year where data security is put at risk and following security incidents. 5. Action is taken to address problems as a result of feedback at meetings. 6. All user devices are subject to anti-virus protections, while email services benefit from spam filtering and protection deployed at the corporate gateway. 7. Action is taken on known vulnerabilities based on advice from NHS Digital, and lessons are learned from previous incidents and near misses. 8. The organization has a defined, planned and communicated response to data security incidents impacting sensitive information or key operational services. 9. The organization has demonstrable confidence in the effectiveness of the security of technology, people, and processes relevant to essential services. 10. The organization securely configures the network and information systems that support the delivery of essential services.
Reducing Compliance Challenges with the Right Solutions
Taken individually, these standards may not seem too strenuous to adhere to. However, to be compliant with DSPT, all 10 items need to be completed and deemed ‘satisfactory’.
To tick all 10 key boxes in the most effective and efficient manner simultaneously, organizations should consider their strategy carefully. This could involve embracing supportive tools to accelerate and enhance their compliance journey.
Boiled down, DSPT demands several key things, including unincumbered visibility of the entire ecosystem, as well as the ability to demonstrate secure access, logs and storage, and essential auditing processes to maintain data security.
Achieving these things might appear complicated, even daunting. However, there are solutions known as Security Information and Event Management (SIEM) systems on the market that can make achieving these capabilities, and in turn DSPT compliance, easy.
Here, we outline some of the key features to look out for to meet compliance: • Log retention: A modern SIEM should be able to provide a centralized log storage and big data platform that scales to any organization’s size. Platforms should be able to provide role-based access to log data, including ‘data privacy’ functionality that can mask sensitive data until approved. Log data should not be modified or removed by users once ingested into the platform, while all data held should also be indexed and fully searchable. • Identifying and disabling unnecessary accounts: A good SIEM will also provide account auditing facilities for Active Directory that allow administrators to quickly identify dormant accounts. They should also be able to remove privileged user access when no longer required or appropriate. More sophisticated platforms will be able to do this in an automated manner. • Easy identification of issues: Clear and easily readable dashboards, alerts and reports for user logging activity should be provided, including failed login, apparent brute-force attempts, and bad password management practices. Further, those using machine learning will be able to identify unusual behavior patterns based on a baseline of activities of users and their peer group. • Integrate with third-party threat feeds: It will also be able to integrate with a wide variety of third-party threat feeds that provide information about specific known threat payloads/hashes and destination domains/addresses.
Meeting the mandate
Of course, having the right features in place is only part of the puzzle. For organizations to be truly successful in embracing tools that enable them to meet DSPT compliance more effectively, they should work to ensure that solutions providers offer them ongoing support – both in terms of ease of deployment and to ensure that they are using key systems in an optimal manner.
Scalability is another important aspect to consider.
Systems should be able to scale and continue to support the organization as data volumes increase and become more complex over time.
In respect of scalability, organizations should take time to think about pricing models, ensuring that these are based on the number of devices (nodes). In doing so, it will become easier to accurately budget future costs, as well as provide greater budgeting certainty over the short, medium and longer term.
A converged SIEM allows organizations to prioritize the big picture over individual tools, enabling them to develop a seamless and easy to use security operations setup. Not only does this approach boost cost transparency and eliminate potential complexities with managing a variety of siloed products – equally, it reduces the burdens on security teams, eliminating complexities over system integration and enhancing performance.
A converged SIEM combines key technologies easily to offer improved security outcomes. In doing so, organizations can easily home in on specific standards and adopt security best practices while reducing the burden on security teams tasked with meeting DSPT compliance.
Read More
Health Technology
Article | July 3, 2023
What is Healthcare Digital Marketing
Digital marketing is a new wave in the world of healthcare marketing strategy. Using advanced technologies that use online marketing platforms such as websites, social media channels, and SEO techniques, to reach potential clients with healthcare products and services encompasses healthcare digital marketing.
Digital marketing in the healthcare sector makes it easier to create, communicate, and deliver health information and make interventions regarding protecting and promoting the health of diverse populations.
Strategies for Healthcare Digital Marketing
There are many trending healthcare digital marketing strategies you can use beneficially in healthcare, but here are the top 10 trending strategies that can help you ensure success:
Create a Wholesome Patient Experience on Your Website
As part of effective healthcare digital marketing for your services, crafting a patient-focused website will help to provide a seamless experience for visitors. While it is important to create a website that you can optimize for search engines, it is also crucial to simplify the process for first-time as well as repeat visitors. Use a conversational tone and features that allow easy navigation so that patients don’t feel like they are being bombarded with medical jargon.
Take a look at Mayo Clinic’s homepage. A patient's needs like online scheduling, specialist lookup, and contact information are easily available, while secondary information for those who would like to explore more before they make an appointment is below. This user-friendly healthcare digital marketing strategy will help you a lot in making visitors return to your website, and when they are looking for products and services.
Employ a Responsive Web Design
With more people leaving the confines of PCs to use the web easily and comfortably, ensuring that your website is responsive to various types of devices is paramount. This applies more to mobile devices because Google has introduced mobile-first indexing in September 2020.
Branding Matters
If you want to use healthcare digital marketing campaigns efficiently you have to identify what your organization as a brand can give patients. Even if it is healthcare, where target markets and organizational priorities are almost similar, patients need differentiating factors for each healthcare provider. If you don’t want a patient to be lost in the sea of white coats, figuring out what is special about what you can offer is crucial. Make sure your organizational goals and healthcare digital marketing goals are in sync to avoid unnecessary expenditure. Analyze your competition and let that assist you in shaping the path that your healthcare digital marketing strategy will take. You can often learn a lot from a competitor’s mistakes.
Provide Blog Content That Is Optimized for SEO
Symptom-related searches constitute 1% of all searches, that’s millions, on Google. Use this information to your benefit when planning your editorial calendar for blogs and include it efficiently in your healthcare digital marketing strategy. While you plan around national health observances, you can integrate long-tail keywords, provide links to reputed health sites and articles within your website, and invest in healthcare digital marketing plans. The four to five listings that show at the top of Google’s organic search results page are called the local pack—this part is vital for mobile users because it is all the screen can display before the user scrolls down. If you haven’t already, you should claim your healthcare website on Google My Business and keep it updated. Apart from this, healthcare digital content marketing plans need to be optimized for healthcare-specific SEO keywords.
Supplement Blogs with Video Content
With more algorithms prioritizing video content, you don’t want to be left behind without any good video content. In the healthcare industry, you have the added benefit of adding to your physician’s credibility if you create edutainment videos telling patients about their area of expertise. Healthcare video marketing can help you leverage the physicians in your organization that are authorities in their respective fields of medicine. Long and scary procedures being described by certified physicians is often reassuring for patients. Likewise, patient testimonials can pay this comforting reassurance forward, resulting in building a good reputation for your organization through similar healthcare digital marketing approaches.
Take Advantage of Paid Advertising
After you’ve created all this carefully crafted content that is optimized for SEO, you can’t just let it sit only on your website. Sometimes even if you maintain up-to-date business listings, Google’s local pack is overshadowed by paid ads. You have to promote it on search engines and social media platforms through pay-per-click (PPC), search, targeted, and display ads. Here you need a clear healthcare digital marketing strategy. Call-only campaigns and other ad extensions can be used to promote the services you offer as well.
Leverage Social Media
While organic social media campaigns are great, they can only get you so far. Using it as your only social media strategy can only give you subpar results compared to paid social campaigns. A paid social media plan is more than just clicking on ‘boost’, you have to create a strategy that suits your goals, targets the audience you need, and budgets for a specific ROI. You can create highly personalized campaigns without wasting your budget and reach the patients who are most likely to find your posts useful. It can be quite advantageous if you use healthcare social media marketing to your benefit while being tasteful in what you post. A healthcare care social media platform can be included in your healthcare digital marketing strategy.
Set up an Email Strategy
In healthcare, there are a few types of emails you can take advantage of, like reminders for appointments and annual physicals, seasonal tips for flu season, and announcements about new technology being used in your organization. Letting opportunities like these slip by is lost chances to keep patients engaged with your services and your patients also lose out on information that potentially could have been useful to them. Including a well-planned email marketing strategy as a part of your healthcare digital marketing plan will prevent patients from marking your email as spam and give you good open rates. Setting up free subscription-based newsletters as Johns Hopkins Medicine does allows you to prevent unnecessary unsubscribes as well.
Follow-up with Patient Reviews and Feedback
Word-of-mouth referrals have and always will be a part of marketing and healthcare digital marketing can help you evaluate the quality of the referrals you are getting. Patient success stories often inspire and evoke emotional responses from people, apart from serving as a way to show others the quality of the healthcare services you provide.
Track Your Healthcare Digital Marketing Strategies
After you’ve put all this effort into creating healthcare digital marketing strategies for email, social, and video you have to analyze where your budget is being spent the most, and whether it is reaping you the kind of benefits you are expecting. Understanding and capitalizing on patient micro-moments allows you to position your brand appropriately so that you are right there when they need your services. Measuring and studying your healthcare digital marketing conversion metrics is highly beneficial when it comes to using your resources to serve your needs best.
It doesn’t hurt to track all the mediums you’re using to communicate with patients including calls that are made to your front desk. Analyzing this data can help you understand the blockers that lie in the path between a patient and doctor. A laggy scheduling system, long call-hold times, and patient misinformation are just some of the revelations this analysis can bring to light.
Trends in Healthcare Digital Marketing
Healthcare digital marketing plans were almost non-existent, but they slowly developed to include traditional marketing like print, direct mail, television, and radio. The limitations of these media can now be overcome with healthcare digital marketing.
Doctor reviews, patient discussion forums, and physician certifications and availability are now an online search away for most patients. On-demand healthcare is becoming increasingly popular, and big data is playing a pivotal role in decreasing errors via patient record analyses and creating preventative plans for recurring emergency room patients.
The future even holds possibilities for telesurgeries, telemedicine continues to grow, and virtual patient treatment and other emerging technologies are changing the landscape of healthcare digital marketing. High-risk patients are being aided by heart rate sensors, oximeters, and exercise trackers paving the way for increased investment in medical devices that can be worn. These devices give people a sense of agency when it comes to their health while creating room for gamification and considerable changes in healthcare insurance. Even with all these innovative changes, for healthcare digital marketers, one aspect will remain primary and this is the patient.
Gone are the days when healthcare costs were affordable and patients were not proactive in researching which healthcare provider to choose. The modern patient has to be prudent in selecting the person responsible for improving their health, and it is your responsibility as a marketer to show them why your organization is the best. Stay updated with the latest healthcare digital marketing trends with webinars as the times are changing faster than ever.
Frequently Asked Questions
What is healthcare digital marketing?
Marketing healthcare products and services with the use of advanced digital technologies and techniques are called healthcare digital marketing. These techniques can be Google AdWords campaigns, responsive websites, SEO tactics, mobile apps, unique landing pages, social media campaigns, and email marketing programs, and much more.
Why is digital marketing important in healthcare?
Healthcare providers are facing challenges everywhere, especially in marketing their products and services. So, as technology is evolving, to stay competitive and continue improving the patient experience, the healthcare industry should invest in healthcare digital marketing strategies.
What is a healthcare marketing strategy?
Healthcare marketing strategies support and promote the practices of healthcare providers and telemedicine providers. Healthcare digital marketing strategy includes many channels and forms to target the right patients in the right way at the right time.
Read More
Health Technology, Digital Healthcare
Article | August 16, 2023
COVID-19 has practically given a metaphorical high-voltage jolt to the whole world. It fell like a plague and affected humans in a way that nothing else has since the last global war. In short, it has reminded us of our mortality. As a result, improvement has become the new goal for the wise.
According to Jana Abelovska, Head Pharmacist atClick Pharmacy, “COVID-19 has put the world on notice, especially the healthcare sector. Everything and everyone has seen its effects. But in this turmoil also come opportunities – an opportunity to grow and be better. It is a time of progress to help create a better and healthier tomorrow.”
Read More
Digital Healthcare
Article | December 18, 2021
“Health care is different, the data here is emotional! If you tell me you were buying a fishing rod online and were emotional about it, I’d say you are lying. But I do frequently see people helpless and confused when it comes to receiving health care, managing its costs, making sense of its data.”
- Senior Product Leader inOptum Global Solutions Pvt. Ltd.
Yes, health care is different, and so is product management in it. This piece highlights the top 4 product management trends that are specific to health care and serve beyond being just a list of technologies making their way into health care.
Health care consumerism
Lance broke his ankle in a bicycle accident and is now in hospital waiting for surgery. Which of these words would describe him more aptly— a ‘patient’ or a ‘health care consumer’? The fact that Lance holds a high-deductible health plan, manages an interactive relationship with his primary doctor, keenly monitors his fitness through his smartwatch, and learns about healthier diet plans and recipes online — I can say he isn’t just receiving health care, but making active choices on how to pay for and manage his health. This choice and responsibility that people demand, is ‘health care consumerism’. This trend has been growing since 2015 when value-based care started picking up in the US.
What does this imply for products/PMs?
These are challenging and exciting times to be a product manager (PM) in health tech. This is because people are now demanding an experience equivalent to what they’re used to from other products in their lives, such as e-commerce, streaming platforms, and digital payments, to name a few. Any consumer-facing product (a mobile app, a web-based patient portal, a tech-enabled service) needs to meet high expectations. Flexible employer-sponsored health plans options, health reimbursement arrangements, price transparency products for drugs and medical expenses, remote health care services, and government's push to strengthen data and privacy rights — all point to opportunities for building innovative products with ‘health care consumerism’ as a key product philosophy.
Wellness
COVID-19 has tested health care systems to their limits. In most countries, these systems failed disastrously in providing adequate, timely medical assistance to many infected people. Prevention is of course better than cure, but people were now forced to learn it the hard way when cure became both inaccessible and uncertain. With lockdowns and social isolation, prevention, fitness, diet, and mental wellbeing all took center stage.
Wellness means taking a ‘whole-person approach’ to health care — one where people recognize the need to improve and sustain health, not only when they are unwell, but also when they’re making health care decisions that concern their long-term physical and mental health. A McKinsey study notes that consumers look at wellness from 6 dimensions beyond sick-care— health, fitness, nutrition, appearance, sleep, and mindfulness. Most countries in the study show that wellness has gained priority by at least 35% in the last 2–3 years. And wellness services like nutritionists, care managers, fitness training, psychotherapy consultants contribute 30% of the overall wellness spend.
So, what do health-tech PMs need to remember about wellness?
The first principle is, “Move to care out of the hospital, and into people’s homes”. A patient discharged after knee surgery has high chance of getting readmitted if he/she has high risk of falling in his/her house, or is unable to afford post-discharge at-home care with a physiotherapist. This leads us PMs to build products that recognize every person’s social determinants of health and create support systems that consider care at the hospital and care at home as a continuum.
The second principle is, “Don’t be limited by a narrow view of ‘what business we are in’, as wellness is broad, and as a health tech company, we are in health-care, not sick-care”. Wellness products and services include — fitness and nutrition apps, medical devices, telemedicine, sleep trackers, wellness-oriented apparel, beauty products, and meditation-oriented offerings, to name just a few. Recent regulations in many countries require health care providers to treat behavioural health services at par with treating for physical conditions, and this is just a start.
Equitable AI
Last month, WHO released a report titled “Ethics and Governance of Artificial Intelligence for Health”. The report cautions researchers and health tech companies to never design AI algorithms with a single population in mind. One example I read was, “AI systems that are primarily trained on data collected from patients in high-income settings will not perform as effectively for individuals in low or middle-income communities.” During COVID-19, we came across countless studies that talked about the disproportionate impact on minorities in terms of infections, hospitalizations, and mortality. A student at MIT discovered that a popular out-of-the-box AI algorithm that projects patient mortality for those admitted in hospitals, makes significantly different predictions based on race — and this may have adversely moved hospital resources away from some patients who had higher risks of mortality.
How should I think about health equity as an AI health-tech PM?
Health equity means that everyone should have a fair chance at being healthy. As a PM, it’s my job to make sure that every AI-assisted feature in my product is crafted to be re-iterative and inclusive, to serve any community or subpopulation, and is validated across many geographies. To prevent any inequitable AI from getting shipped, it is important to ensure that the underlying AI model is transparent and intelligible. This means knowing what data goes into it, how it learns, which features does it weigh over others, and how does the model handles unique features that characterize minorities.
Integrated and interoperable
In every article that I read on topics such as digital platforms, SaaS, or connectivity with EMRs, I always find the words: ‘integrated’ and ‘interoperable’ therein. Most large and conventional health tech companies started by offering point-solutions that were often inextensible, monolithic, and worked with isolated on-prem servers and databases. To give a consistent user experience, leverage economies of scope, and scale products to meet other needs of their customers, started an exodus from fragmented point-solutions to interoperable, integrated solutions. The popularization of service-oriented architectures (SOAs) and cloud vendors like AWS, Azure, and GCP has also helped.
The what and how of integrated-interoperable solutions for PMs:
Integrated solutions (IS), as I see them, are of two kinds — one, in which as a health tech company, we help our customers (health systems, insurance companies, direct to consumers) accomplish not just one, but most/all tasks in a business process. For example, a B2B IS in value-based care contract management would mean that we help our customers and health systems by giving an end-to-end solution that helps them enter into, negotiate, plan for, manage, get payments for their value-based contracts with health plans.
In the second type of IS, we offer products that can be easily customized to different types of customers. For example, a health management app that people can subscribe to for different programs such as obesity, diabetes, hypertension, cholesterol management, as needed. The app works with different datasets for these programs and uses different analyses and clinical repositories in its backend, but still delivers a consistent user experience across programs to a user who enrolled in multiple programs, say diabetes and weight management.
‘Interoperable’ simply means that one product should be able to talk to other products both in and out of the company. For example, if product-A can alert a doctor about any drug-drug interactions or allergies a patient might have, while she is writing prescriptions for the patient in product-B (an EMR), then product-A does talk to product-B, and hence, is interoperable. This trend is picking up further with the growth of IoT devices, and industry-wide participation in adopting common standards for data exchange.
Conclusion
Though the article derives much of its context from US health care, I have tried to keep a global lens while choosing these topics. For developing economies like India, digitization is the number one trend as much of the health system is still moving from manual records to digitally store patient and medical data in EMRs. The good news is that India is booming with health-tech innovation and that is where consumerism, wellness, and equitable AI make sense. Once companies develop enough point-solutions for different health system needs and use-cases, Indian health tech will see a move towards creating integrated, interoperable (IGIO) systems as well.
There are some other trends such as — use of non-AI emerging tech such as Blockchain in health information management, cloud infrastructure for health tech innovation, big data and analytics to improve operational efficiency in areas such as claims management and compliance reporting, Agile product management for co-developing with and continuously delivering to clients etc. — but I see them either as too nascent, or too old to feature in this list.
Finally, as a health tech product manager, you can use the following questions to assess your products against the above trends — (Consumerism) do the products that I manage, empower consumers with choice, information, and actionability? (Wellness) Does my product emphasize keeping them out-of-hospitals and healthy in the first place? (Equitable AI) Am I sure that my product doesn’t discriminate against individuals belonging to underserved populations? (IGIO) And finally, is my product scalable, integrated and interoperable to expand to a platform, in the true sense?
Read More