Robust security strategy addresses protection, detection, reaction
As connected care becomes the norm in healthcare, security threats strike fear into all healthcare organizations. Protecting data requires a comprehensive system of practices, policies and solutions designed to protect data at rest and in motion. PC Connection, Inc.’s Security Practice has the know-how and solutions to help you structure a program to manage your policies, controls and compliancy requirements, and reduce your security threats.
The overall philosophy of PC Connection, Inc.’s security solutions and services is to put together a strategy that addresses the three key tenets of security: protection, detection and reaction, said Stephen Nardone, the company’s director of security solutions and services division.
The company builds a strategy with four core components. Strategy creation starts with an assessment of assets and determining asset vulnerability and exploitability. Once you know what you have and where you are, PC Connection, Inc.’s security team develops security policies and a risk governance program to monitor and manage where you stand at any given moment in time.
The third component is managed security services. “You can put all the energy you want into putting the best technology in place, building policies and procedures, and doing the best that you can to put in place staff to help manage your security,” Nardone said, “but if you’re not actively monitoring and managing your critical security devices to look for potential events, breaches, or attacks then you’re missing the boat entirely.”
The final component is something Nardone calls a unified security stack approach in which the PC Connection, Inc. security team assesses the security technology, the number of vendor solutions and how effectively the technology integrates into a unified risk management approach. A unified approach, with a minimized set of vendor technologies, centrally managed with a reduced set of management consoles and dashboards, increases efficiency and ROI, and decreases TCO while also reducing the risk to the overall environment. “This is really important in the healthcare space,” Nardone said, “because of the wide variety of products available and used in a non-integrated and insecure way.”