Strengthening Healthcare Security in the UAE: Cisco's Priority Actions

The UAE's healthcare sector is dynamically shifting to digital technologies, including electronic health records, telemedicine, and AI-driven diagnostics, while facing heightened cybersecurity risks. Phishing remains the most common entry point for attacks, and vulnerable patient data makes the sector a prime target for cyberattacks. To address this, Cisco shares five priority actions for policymakers and healthcare organizations to combat cyber-attacks and maintain digital resilience.

Key Takeaways:

• Treat Obsolete IT Systems as a Systemic Risk: Policymakers and regulators must incentivize healthcare providers to address vulnerabilities associated with legacy systems, which pose a systemic risk to healthcare delivery.
• Reimagine IT Spending Models: Hospitals must have flexibility to reallocate funds between capital expenditures (CapEx) and operational expenditures (OpEx) without bureaucratic delays or approvals, enabling adoption and sustainability of advanced cybersecurity solutions.
• Elevate Cybersecurity Training to a Strategic Priority: Regular, sector-specific cybersecurity training must be mandatory for all healthcare staff, including basic cyber hygiene and effective response procedures.
• Encourage Resource Sharing and Regional Collaboration: Policymakers should encourage resource sharing and regional collaboration between hospitals, laboratories, healthcare insurers, and research institutions to build a resilient healthcare ecosystem.
• Secure Electronic Health Records (EHRs) as a Top Priority: Policymakers must ensure that EHR systems meet stringent cybersecurity requirements, including robust access controls, encryption, and interoperability standards.

Statistics:

• Phishing remains the most common entry point for cyberattacks in the healthcare sector.
• Weakened passwords, shadow IT, and lack of awareness are pervasive issues in the healthcare sector.
• The Department of Health Abu Dhabi (DoH) has set a strong benchmark for cybersecurity in healthcare through its Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS) framework.
• In the UAE, world-class healthcare is supported by advanced digital connectivity but also heightened cybersecurity risks.

Sources:

• Cisco Middle East official statement
• Al Bawaba (www.albawaba.com) article
• Cisco press release on cybersecurity in healthcare
• Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS) framework
• Department of Health Abu Dhabi (DoH) official statement