La migration d'InfoCentral vers Accelerō a été suspendue le temps que nous mettions au point les prochaines étapes. En savoir plus >

Partager :

Le contenu créé par les communautés et les groupes de travail est accessible dans la version originale seulement.

Cybersecurity


Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.
Membres: 142
Personne-ressource: Ann-Marie Westgate
Type: Ouvert
Accès: Public
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

À propos de nous

Scope

Canada Health Infoway is working closely with the provinces and territories (P/Ts) in support of the accelerated deployment or scaling of virtual care solutions. COVID-19 has created the impetus for moving quickly to virtual care solutions. Now, more than ever, Canadians want virtual and digital health solutions that enhance access to care.

Among the key common requirements are the need for well defined Security policies and tools that can be readily adopted to ensure that the virtual care investments made across the country maintain the safety and security of Canadians’ health information.

What are the common challenges facing Cybersecurity leaders?

  • Healthcare organizations are "feeling” that cyber threats are increasing, and security is getting more complex. Healthcare providers are trying to keep up vs. focusing on delivery of patient care
  • As more applications are moving to cloud, healthcare organizations are assessing a multitude of cloud services and their security and privacy processes
  • There is a shortage of skilled cybersecurity experts to meet the workforce's needs, so leaders depend more on collaboration with others in their industry
  • COVID-19 had led to organizations dealing with security risks associated with a remote work force, and supporting patients without bringing them into the clinical setting
  • Service providers are challenged by differing security requirements across jurisdictions, even when implementing solutions with Pan-Canadian reach

Participation

This community welcomes participation by Security leaders from:

  • Healthcare delivery organizations
  • Members of Federal, Provincial and Territorial Governments (P/Ts), Jurisdictions,
  • Private sector digital health service and product vendors who wish to work with jurisdictions and health delivery organizations

Value Proposition

Canada Health Infoway can help enable health delivery organizations to share in economies of scale and private sector businesses to efficiently and effectively interact with health organizations across Canada.

  • Standard Security Requirements and evaluation criteria for use in procurement processes, including security architecture and testing requirements. (Targeting Summer 2021)
  • Templates for Security Policies and Standards - customizable for specific uses and shared with Participants as an open Cybersecurity resource. (Targeting Fall 2021)

Key Resources

The following is a directory of resources that are free or not-for-profit serving Cybersecurity in the Healthcare sector

Leader

Ann-Marie Westgate, Director of Security, Canada Health Infoway

Activité

Courtney Phillips a répondu au cours d'une discussion dans le groupe Cybersecurity

Thank you so much for your speedy reply! My email is [email protected]. I'd love to share how we incorporated your valuable feedback into our proposed framework and get your final thoughts. We look forward to corresponding with you. Sincerely, Courtney

Katherine McMillan a répondu au cours d'une discussion dans le groupe Cybersecurity

Hi Courtney, This is looking really good. I currently lead Open Source Connect, Connected for Care, and the Ottawa PostgreSQL User Group. I would be happy to participate in an email exchange. What I would say off the top is that Legacy Systems, administrators, and academics never supported the monopolization and vendor lock-in that we are currently facing. It's a complex issue that has resulted in a situation that compromises both security and total cost of ownership. However, as I am highlighting in an upcoming talk, the situation is complicated. Open Source solutions do not, inherently, enhance security. In fact, the Shai-Hulud worm has been released under an open source license on GitHub, causing catastrophic consequences (more info here: https://www.darkreading.com/application-security/shai-hulud-hackers-teampcp-lucky-skilled). Categorizing a transition or migration by Immediate Resolutions or Future Mitigations would be difficult, if not impossible (for this issue, not for others, as you have identified). However, I would state, point blank, in the "Recommended Industry Best Practices" that open source solutions should be considered at every layer (operating system, database management system, electronic medical record system, hospital information system, etc.) in order to help mitigate the, frankly scary, consequences of monopolization. Sincerely, Katie

Courtney Phillips a lancé une nouvelle discussion dans le groupe Cybersecurity

Hi everyone, I am a Health Systems Management student at Fanshawe College. My group is currently completing an assignment for our Health Systems Environments course focused on the operational and cybersecurity challenges of Legacy Systems in healthcare. As part of our academic framework, we are required to consult with a healthcare IT, HIM, or security professional to briefly validate our strategic approach and get an industry "sign-off" (which can be a simple, quick email confirmation). We have synthesized current literature (including Yelagam, 2025; Silvestri et al., 2023; and SOTI, 2025) into the following three-part framework: Immediate Resolutions (Short-Term): Implementing strict network segmentation (VLAN isolation), applying compensating endpoint controls (disabling unused ports), enforcing enhanced access controls/MFA, and deploying continuous network monitoring (IDS). Future Mitigations (Long-Term): Shifting from high-risk "big-bang" replacements to incremental modernization via Strangler Fig architecture, utilizing AI-driven threat intelligence (ML/NLP tools), and piloting decentralized data architectures (blockchain). Recommended Industry Best Practices: Establishing risk-based vulnerability frameworks, mandating security-focused procurement SLAs for medical devices, utilizing network-level Virtual Patching via IPS, and transitioning capital models to reflect Total Cost of Ownership (TCO). Would any privacy, security, or HIM professional in this community be open to reviewing this strategy via a quick email exchange? We just need to know if these points align with your real-world operational experiences or if there is a critical healthcare deployment hurdle we missed. If you can help us with this before our Wednesday, June 3rd deadline, please reply here or send me a direct message. Thank you so much for supporting local health informatics and management students! Sincerely, Courtney

Courtney Phillips s'est joint(e) à un groupe

Cybersecurity Logo
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

Peter Nguyen s'est joint(e) à un groupe

Cybersecurity Logo
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

MIRABELLE AKINYERA s'est joint(e) à un groupe

Cybersecurity Logo
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

Huzefa Nakhooda s'est joint(e) à un groupe

Cybersecurity Logo
Security experts working in healthcare or health solution providers sharing knowledge, information, and resources to promote security in healthcare, and safeguard Canadians’ personal health information.

Événements



Événements à venir :

Aucun événement

Forum

Seeking Professional Feedback for Student Project (Healthcare Legacy Systems) 05/31/26

Thank you so much for your speedy reply! My email is [email protected]. I'd love to share how we incorporated your valuable feedback into our proposed framework and get your final thoughts. We look forward to corresponding with you....

Seeking Professional Feedback for Student Project (Healthcare Legacy Systems) 05/31/26

Hi Courtney, This is looking really good. I currently lead Open Source Connect, Connected for Care, and the Ottawa PostgreSQL User Group. I would be happy to participate in an email exchange. What I would say off the top is that Legacy System...

Seeking Professional Feedback for Student Project (Healthcare Legacy Systems) 05/31/26

Hi everyone, I am a Health Systems Management student at Fanshawe College. My group is currently completing an assignment for our Health Systems Environments course focused on the operational and cybersecurity challenges of Legacy Systems in healt...

Can we join forces with the National Cybersecurity Consortium? 02/18/26

Hello all, I'm wondering if we can join forces with the National Cybersecurity Consortium (https://ncc-cnc.ca/)? -Katie

Cybersecurity issues encountered by psychologists in mental health clinics 06/19/25

Hi everyone, I am a student at Fanshawe College, doing the Health System Management course. I would like to get some insights about some cybersecurity issues encountered by clinical psychologists in a mental health clinic, and what are some of the...

Looking for insight in Cybersecurity risks for Respiratory Therapist 06/19/25

Hi everyone, I’m starting this thread to explore the growing issue of cybersecurity risks in hospitals for Respiratory Therapists. They often handle sensitive patient data, and other life-saving technological information, making them targets for t...

Looking for insights on Cybersecurity Risks Physicians face in Clinics 06/19/25

Hello Celica, This is a great topic! Like you've pointed out, physicians face many cybersecurity threats, particularly Canadian physicians. What do I think are the biggest cybersecurity challenges clinical physicians face today? That's a m...

Looking for insights on Cybersecurity Risks Physicians face in Clinics 06/19/25

Hi everyone, I’m starting this thread to explore the growing issue of cybersecurity risks in clinic settings. Physicians often handle sensitive patient data, making them targets for threats like data breaches, ransomware, and phishing attacks....

Looking for Insights on Cybersecurity Risks Nurses Face in Hospitals 06/17/25

Hi Katie, Thank you so much for your thoughtful response! Your explanation of social engineering helped me understand how psychological tactics, such as impersonating a colleague, can be just as risky as technical attacks, especially in a setting...

Looking for Insights on Cybersecurity Risks Nurses Face in Hospitals 06/16/25

Hi Shivangi, This is a good topic, and is a great one for discussion of social engineering. What is the best way to get information from a nurse? -If one is a large or strong person, they could use physical force, including physical threats (w...

Looking for Insights on Cybersecurity Risks Nurses Face in Hospitals 06/16/25

Hi everyone, My name is Shivangi Patodiya, and I’m a student in the Health Systems Management program at Fanshawe College. I’m currently working on a group assignment focused on cybersecurity risks faced by nurses in hospital settings, specificall...

Cybersecurity Guidelines for Pharmacy Practice 06/15/25

Hello, my name is Funmi Bamisaye, and I’m a student at Fanshawe College, currently researching cybersecurity in pharmacy practice. My project focuses on common risks, including unauthorized access to digital health records, phishing, and supply chain...

Cybersecurity for Nursing Department in Hospitals 06/14/25

Hi everyone! I am Muskaan, enrolled in Health System Management at Fanshawe College, London. Our group is currently working on a Cybersecurity in Healthcare Systems assignment, and my focus is specifically on Registered Nurses (RNs) in hospital...

pharmacist in the hospital 06/13/25

Hello everyone, My name is Ma. Joana Dionisio, and I’m currently studying Health Information Management at Fanshawe College. For one of our assignments, we’re focusing on cybersecurity risks that specifically affect pharmacists working in hospital s...

Cybersecurity issue 06/13/25

Hi Katie, Thank you so much for your valuable insight into device vulnerabilities. The real-life example you shared really helped us understand just how critical cybersecurity is in healthcare, particularly within laboratory settings. To build...

Documents

Cliquez sur « Gérer des documents » pour :

  • voir la liste complète des documents ou les dossiers regroupant les documents
  • téléverser un nouveau document

N. B. : Les membres des groupes ne sont actuellement pas avisés de l'ajout d'un nouveau document. Pour aviser d'autres membres, vous devez en afficher l'adresse électronique dans le forum. (La fonction d'avis de téléversement des nouveaux documents est en préparation.)

Gérer des documents Vous devez peut-être ouvrir une session et/ou être déjà membre du groupe pour accéder à ce contenu.

Vidéo

Ce groupe n'a pas de video.

Membres

Ann-Marie Westgate
Photo de Ann-Marie Westgate
Canada Health Infoway
Déconnecté(e)
Personne-ressource
Courtney Phillips
Photo de Courtney Phillips
Fanshawe College
Déconnecté(e)
Membre
Peter Nguyen
Photo de Peter Nguyen
DT Consulting
Déconnecté(e)
Membre
MIRABELLE AKINYERA
Photo de MIRABELLE AKINYERA
undefined
Déconnecté(e)
Membre
Huzefa Nakhooda
Photo de Huzefa Nakhooda
DT Consulting Group
Déconnecté(e)
Membre
Courtney Rideout
Photo de Courtney Rideout
undefined
Déconnecté(e)
Membre
Biyi Ogunsola
Photo de Biyi Ogunsola
Fanshawe College
Déconnecté(e)
Membre
Mason Ross
Photo de Mason Ross
Doctalk Inc.
Déconnecté(e)
Membre
Hrudaya Spandana Bestha
Photo de Hrudaya Spandana Bestha
undefined
Déconnecté(e)
Membre
Dany Bérubé
Photo de Dany Bérubé
CHUM
Déconnecté(e)
Membre
Florencia Catania
Photo de Florencia Catania
Bamberg Health
Déconnecté(e)
Membre
Abdullah Khan
Photo de Abdullah Khan
Ontario Ministry of Health and Ministry of Long-Term Care
Déconnecté(e)
Membre
Daniel Rih Cheng Liang
Photo de Daniel Rih Cheng Liang
TCIC Global Certification Ltd.
Déconnecté(e)
Membre
Ayebatonye Oludiran
Photo de Ayebatonye Oludiran
n/a
Déconnecté(e)
Membre
Chris LeMesurier
Photo de Chris LeMesurier
Government of NB
Déconnecté(e)
Membre

Logo d'InfoCentral

La santé numérique à votre service

 

Transformer les soins de santé au Canada grâce aux technologies de l'information sur la santé.