Fortinet to Demonstrate Security Solutions for the Healthcare Industry

While most businesses can deploy new cybersecurity solutions that will provide an additional level of protection from email-based threats, healthcare companies have an additional consideration. Any solution that is capable of touching protected health information must meet the requirements of the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.

Fortinet has confirmed that its solutions are fully compliant with HIPAA and can help healthcare providers protect against increasingly sophisticated targeted cyberattacks.

As Fortinet notes, healthcare cyberattacks have increased by 125% since 2010 and are now the leading cause of data breaches. Advanced threats are now much better at bypassing traditional defenses such as perimeter firewalls and gaining access to the relatively unprotected internal network. While perimeter firewalls are essential, no single solution can provide total protection against all external threats.

One of Fortinet’s key solutions for the healthcare industry is internal segmentation firewalls (ISFWs). These internal firewalls provide an additional layer of protection for sensitive data such as PHI, and allow healthcare providers to segregate key assets such as medical devices and EHRs, helping to improve visibility into potential cyberattacks.

FortiMail is an advanced email security gateway used to secure the most commonly used attack vector: Email. In addition to blocking malware, ransomware, and phishing emails, the solution includes policy-driven encryption for messages, helping to ensure compliance with HIPAA.  FortiWeb allows healthcare organizations to block web-based threats while carefully controlling the web content that can be accessed by employees, patients, and guests over the Internet.

These and other solutions ideal for healthcare organizations are being demonstrated by Fortinet at HIMSS16 at Booth 438, with staff also participating in several speaking sessions throughout the event on February 29 – March 4 in Las Vegas.

Author: Richard Anderson

Richard Anderson is the Editor-in-Chief of NetSec.news