title: A Socio-Technical Approach to Preventing, Mitigating, and Recovering from Ransomware Attacks.
abstract: Recently there have been several high-profile ransomware attacks involving hospitals around the world. Ransomware is intended to damage or disable a user's computer unless the user makes a payment. Once the attack has been launched, users have three options: 1) try to restore their data from backup; 2) pay the ransom; or 3) lose their data. In this manuscript, we discuss a socio-technical approach to address ransomware and outline four overarching steps that organizations can undertake to secure an electronic health record (EHR) system and the underlying computing infrastructure. First, health IT professionals need to ensure adequate system protection by correctly installing and configuring computers and networks that connect them. Next, the health care organizations need to ensure more reliable system defense by implementing user-focused strategies, including simulation and training on correct and complete use of computers and network applications. Concomitantly, the organization needs to monitor computer and application use continuously in an effort to detect suspicious activities and identify and address security problems before they cause harm. Finally, organizations need to respond adequately to and recover quickly from ransomware attacks and take actions to prevent them in future. We also elaborate on recommendations from other authoritative sources, including the National Institute of Standards and Technology (NIST). Similar to approaches to address other complex socio-technical health IT challenges, the responsibility of preventing, mitigating, and recovering from these attacks is shared between health IT professionals and end-users.
authors.affiliation: University of Texas Health Science Center at Houston , School of Biomedical Informatics and UT-Memorial Hermann Center for Health Care Quality and Safety, Houston, Texas.
authors.forename: Dean F
authors.initials: DF
authors.lastname: Sittig
authors.affiliation: Houston Veterans Affairs Center for Innovations in Quality, Effectiveness and Safety, Michael E. DeBakey Veterans Affairs Medical Center, Houston, Texas; Section of Health Services Research, Department of Medicine, Baylor College of Medicine, Houston, Texas.
authors.forename: Hardeep
authors.initials: H
authors.lastname: Singh
mesh_terms: D003195:Computer Communication Networks; D016494:Computer Security; D003695:Delivery of Health Care; D057286:Electronic Health Records
keywords: Health information technology; cybersecurity; electronic health record; ransomware; socio-technical