Renewals for the 2025-2026 HL7 Canada Affiliate Access are now being accepted. Please renew your access by April 1, 2025. Learn More >

Share this page:

Cybersecurity


Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.
Members: 108
Contact: Robert Martin
Type: Open
Access: Public
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

About

Scope

Canada Health Infoway is working closely with the provinces and territories (P/Ts) in support of the accelerated deployment or scaling of virtual care solutions. COVID-19 has created the impetus for moving quickly to virtual care solutions. Now, more than ever, Canadians want virtual and digital health solutions that enhance access to care.

Among the key common requirements are the need for well defined Security policies and tools that can be readily adopted to ensure that the virtual care investments made across the country maintain the safety and security of Canadians’ health information.

What are the common challenges facing Cybersecurity leaders?

  • Healthcare organizations are "feeling” that cyber threats are increasing, and security is getting more complex. Healthcare providers are trying to keep up vs. focusing on delivery of patient care
  • As more applications are moving to cloud, healthcare organizations are assessing a multitude of cloud services and their security and privacy processes
  • There is a shortage of skilled cybersecurity experts to meet the workforce's needs, so leaders depend more on collaboration with others in their industry
  • COVID-19 had led to organizations dealing with security risks associated with a remote work force, and supporting patients without bringing them into the clinical setting
  • Service providers are challenged by differing security requirements across jurisdictions, even when implementing solutions with Pan-Canadian reach

Participation

This community welcomes participation by Security leaders from:

  • Healthcare delivery organizations
  • Members of Federal, Provincial and Territorial Governments (P/Ts), Jurisdictions,
  • Private sector digital health service and product vendors who wish to work with jurisdictions and health delivery organizations

Value Proposition

Canada Health Infoway can help enable health delivery organizations to share in economies of scale and private sector businesses to efficiently and effectively interact with health organizations across Canada.

  • Standard Security Requirements and evaluation criteria for use in procurement processes, including security architecture and testing requirements. (Targeting Summer 2021)
  • Templates for Security Policies and Standards - customizable for specific uses and shared with Participants as an open Cybersecurity resource. (Targeting Fall 2021)

Key Resources

The following is a directory of resources that are free or not-for-profit serving Cybersecurity in the Healthcare sector

Leader

Ann-Marie Westgate, Director of Security, Canada Health Infoway

Activity

Anne-Marie Taylor joined a group

Cybersecurity Logo
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

Events



Upcoming events:

No events

Forum

Cybersecurity in Dental Clinics 02/26/25

Hi Kodian, One of my favourite articles on Medium.com is about red-teaming LLMs: https://medium.com/ai-in-plain-english/llm-jailbreak-comparing-drattack-artprompt-and-morse-code-17acb0f18be8 I would be considered on the anti-LLM/AI takeover sid...

Cybersecurity in Dental Clinics 02/26/25

I used AI to help generate this response to please don't quote the text - only use it as a guide to identify points of research.

Dietitians using Outdated Software and Systems 02/26/25

Good question, and thanks for sparking the discussion! Here are a few recommendations tailored to a Canadian context, building on points already mentioned: Risk Assessment & Vendor Transparency As Matt noted, verify if vendors provide security de...

Cybersecurity in Dental Clinics 02/26/25

Cybersecurity Recommendations for Dental Clinics in Canada Cybersecurity is a critical concern for dental clinics, especially with threats like data breaches, ransomware, and insider attacks. Below are practical recommendations, tailored for Canad...

"Man in the Middle" (MitM) Attacks 02/26/25

One of the scariest cybersecurity threats/attacks that can be faced in healthcare, or in general, is called a "Man in the Middle" attack. This form of attack can happen when a 'threat actor' gets access to the middle of communications or systems, an...

How to avert DDoS (Distributed Denial of Service) attack in Pharmacy chains 02/25/25

Thank you, Klei, for an insightful reply. The points you mentioned will definitely help me and my team to report on the subject matter. Truly appreciate the help.

Cybersecurity in Dental Clinics 02/25/25

Hi Klei, Thanks for taking the time to read and respond to my post.

Cybersecurity in Dental Clinics 02/25/25

Hi Kodian, Thanks for reaching out! Those are common cybersecurity threats. Some mitigations to consider are: - Employee training and awareness - Having technical controls in place that would alert when something seems off - Strong network sec...

Dietitians using Outdated Software and Systems 02/25/25

Hi Marion, When I ever encounter new software that I'm not familiar with, which is something security staff encounter as part of their work, then I approach the issue by learning as much about the software as possible. Questions I'm looking to an...

How to avert DDoS (Distributed Denial of Service) attack in Pharmacy chains 02/25/25

Hi Darwin, Thank you for reaching out! Here are some things to consider: - DDoS can be prevented using IDS/IPS (Intrusion Detection and Prevention systems) - Services that provide load balancing etc. and cloud hosting providers often have DDoS p...

Dietitians experiencing Phishing Attacks in a hospital setting 02/25/25

Hi Marion, Thanks for reaching out! Here are some things to consider: - Employee training and awareness so that dieticians are informed and aware of what to look for and to distinguish a phishing attack - Having a phishing reporting process in...

Cybersecurity in Dental Clinics 02/25/25

Good day, I am a student doing a project on the topic cybersecurity in dental clinics. As part of the project, we are exploring different cybersecurity issues. We selected data breach, ransomware attacks, and insider threats. As such my qu...

Cybersecurity issues in Dental Clinics 02/25/25

Hi Katie! Thank you for your reply. That topic sounds interesting, and it's the first time I've heard about that specialty group. I'll try to research more about it. Patient data breaches, phishing emails are the most common issues but is there anyth...

Cybersecurity issues in Dental Clinics 02/25/25

Hello Margareth, Awesome topic! There is really something to this. In your research, you have probably seen that specialists called "Odontologists" get involved in certain cases. These specialists can provide really amazing forensic support, and...

Cybersecurity issues in Dental Clinics 02/24/25

Hi! I'm Margareth, a student studying Health Systems Management. Part of my assignment is to research cybersecurity issues in dental clinics. I would appreciate it if you could give me some information on what these issues are and how to mitigate the...

Documents

Click Manage documents to:

  • view the complete list of documents or documents grouped by folder
  • upload a new document

Note: Group members are not currently notified when new documents are added. To notify others, you must post the URL to the new document in the forum. (Notification of document uploads is a feature in development.)

Manage documents You may need to login and/or be a member of the group to access this content.

Security Policies v1.0 - Second Open Review

Published on Sep 16, 2021 by Ann-Marie Westgate

Security Policies DRAFT v0.1

Published on Jun 28, 2021 by Ann-Marie Westgate

Video

This Group has no videos.

Members

Robert Martin
Picture of Robert Martin
Canada Health Infoway
OFFLINE
Contact
Ann-Marie Westgate
Picture of Ann-Marie Westgate
Canada Health Infoway
OFFLINE
Contact
Bijiteshwar Aayush
Picture of Bijiteshwar Aayush
Canada Health Infoway
OFFLINE
Admin
Anne-Marie Taylor
Picture of Anne-Marie Taylor
Alberta Health Services
OFFLINE
Member
Kodian Brooks
Picture of Kodian Brooks
Fanshawe
OFFLINE
Member
Margareth Languido
Picture of Margareth Languido
n/a
OFFLINE
Member
Darwin Tanchoco
Picture of Darwin Tanchoco
n/a
OFFLINE
Member
aarti devi
Picture of aarti devi
fanshawe college
OFFLINE
Member
Marion Calungsud
Picture of Marion Calungsud
n/a
OFFLINE
Member
Divya Singh Chauhan
Picture of Divya Singh Chauhan
Fanshawe College
OFFLINE
Member
Clinton Cabillada
Picture of Clinton Cabillada
n/a
OFFLINE
Member
Shanoi Chambers
Picture of Shanoi Chambers
n/a
OFFLINE
Member
David Cumming
Picture of David Cumming
Canada Health Infoway
OFFLINE
Member
Santiago Riveros
Picture of Santiago Riveros
n/a
OFFLINE
Member
GUNJAN CHOPRA
Picture of GUNJAN CHOPRA
Eastern College
OFFLINE
Member

InfoCentral logo

Improving the quality of patient care through the effective sharing of clinical information among health care organizations, clinicians and their patients.