Cybersecurity: What Health Informatics Professionals Need to Know

Health informatics is one of the hottest areas of health care. But the fact that it forms the junction of health care and information technology makes it an attractive target for cybercriminals. They have proven adept at infiltrating health care institutions using a variety of tactics.

The U.S. Department of Health and Human Services Office of Civil Rights, for example, provides a Breach Portal with some startling statistics.1 The portal shows that data about more than 120 million people have been compromised in more than 1,100 separate breaches at organizations handling protected health data since 2009.

The reason attacks can successfully skip past the various layers of health care security technology in place is that cybercrime has evolved to encompass many different attack vectors. For many years, web-based threats posed the most danger to organizations. But according to Osterman Research surveys2, email is now the top avenue of infiltration into organizations, with social media becoming the fastest-growing sector of concern within cybersecurity.

Health informatics professionals dealing with the security of patient information, therefore, may find that existing defenses are aligned more with web-based threats while the email channel is relatively poorly protected – hence the rise of phishing in its various forms as the bane of the health care security world.

Phishing:

Phishing emails are sent to large numbers of users simultaneously and attempt to “fish” sensitive information from unsuspecting users by posing as reputable sources. In health care, the ploy is to trick the user into either clicking on a link to infect the PC, open an infected attachment, or go to a fake health care website to enter login credentials, financial information, social security data, or credit card details. According to the Verizon 2016 Data Breach Investigations Report3, 30% of recipients open phishing messages. Another 12% click on attachments.

Spearphishing:

Spearphishing is a targeted form of phishing aimed at specific individuals or a small group. The instigator has studied the health care provider, gathered information from social media sites, and is determined to con a hospital administrator or clerk into handing over the keys to the kingdom. With data such as travel plans, family details, employment history, and various medical affiliations being on public view in Facebook, Twitter, or LinkedIn, emails that seem to be legitimate often successfully fool users into compromising the network.

Watering holes:

A watering hole is a place you tend to visit frequently and which is trusted. This might be a regularly used website, a partner’s portal, or a vendor marketplace. By compromising that location, the bad guys seek to piggyback one’s access into the corporate network.

Misleading/Malicious Websites:

Cybercriminals have gotten clever about registering website URLs similar to legitimate health-care sites4. Healthcare.gov, for example, has Healthcare.com, Healthcare.org, Healthcare.net, Health-Care.org, and Obamacare.com piggybacking off its good name, with many of these sites looking for personal information.

Medical Device Insecurity:

As medical systems and devices adopt more wireless and web-based technologies, the risk of exposure to malware magnifies. This is so much the case that the Food and Drug Administration issued an alert about cybersecurity to manufacturers of medical devices, and hospitals with regard to their networks.5 In essence, embedded computer systems inside medical devices can be compromised or even used to infiltrate health care security networks and databases. Hospital networks may are vulnerable because of unauthorized access, and out of date antivirus software and firewalls.

Ransomware:

Perhaps the most dangerous threat to the health care industry is ransomware . Instead of merely infecting systems with nuisance ads or spam, such an attack shuts down a desktop, a server, or an entire network. The most famous strain is the Cryptolocker malware and its numerous variants, which encrypt files and demand a ransom in order to receive the key to decrypt the files.

Improving Healthcare Security

As a result of threats such as these, the discipline of health informatics demands a deep understanding of cybersecurity.

In addition to data analytics, mobile health, population health, and mobile health apps, The University of Scranton Online Master of Science in Health Informatics program gives graduates a grounding in health-care security. This includes how to combat web-borne threats, how to detect network incursions as soon as they occur, how to isolate suspicious behavior and detect malware that has found its way past the firewalls, and how to develop strategies to defend against phishing, and more. Armed with these skills, those graduating from the program are going to be a sought-after commodity in the job market.

 

To learn more about Health Informatics education at The University of Scranton, click here.

_____________________________________________________

Sources:

  1. The U.S. Department of Health and Human Services Office of Civil Rights. (n.d.). Breach portal. Retrieved from https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
  2. Cimpanu, C. (2016). One in five companies gets malware infections via social media. Retrieved from http://news.softpedia.com/news/one-in-five-companies-get-malware-infections-via-social-media-502603.shtml
  3. (2016). Verizon 2016 Data breach investigations report, Retrieved from http://www.verizonenterprise.com/verizon-insights-lab/dbir/
  4. Ristau, V. (2013). Technically speaking, health informatics cybersecurity/Main categories of risk. Retrieved from http://blogs.dlt.com/health-informatics-cybersecurity-main-categories-risk/
  5. Food and Drug Administration. (2013). FDA Safety Communications: Cybersecurity for medical devices and hospital Networks Retrieved from http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm356423.htm
    (2016). White Paper: How to transform employee worst practices into best practiceshttps://info.knowbe4.com/whitepaper-employee-worst-best-practices-enterprise-security

Count on a Great Accounting Resume!

Professional Accounting Resume Tips

Your resume has to stand out in a pile of papers. Once it is noticed, it also has to demonstrate you know the accounting industry.

An effective resume delivers the information employers need up front and then provides something memorable or different.

A professional accounting resume is no different, with your skills presented front and center. Using accounting lingo naturally throughout also shows you’re familiar and comfortable with the everyday language you will need. 

The basic role of a resume is to demonstrate to an employer that you can handle required tasks using acquired skills supported by proper educational qualifications. What people often forget to do is shape their resume to the job description presented to them.

Career Objective Related to the Accounting Position

As an accounting job candidate, you should talk about the company in your objective, making it as specific as possible and linking back to your skills. Use short-term goals first, rather than long-term, generic goals. “To be employed at a company I respect at a job I love” doesn’t cut it anymore, if it ever did.

Keep this objective short, just one or two sentences.

What Accounting Companies Look for in a Hire

Those who hire for accountancy positions do not want generic resumes that could be sent to any employer out there. Start with that idea as you build your resume.

Employers want to know your skills, clear examples of work ethic and effort and, finally, some hint of your personality. A professional resume for an accountant provides this in clear sections with bulleted lists, not a narrative. Your story comes in your cover letter, which should be equally focused without rambling.

List Accounting Skills, Competencies, and Credentials

A resume needs to persuade with facts, not speculation. If you don’t have the skills the company is requesting, you probably shouldn’t be applying. To make your resume stand out, add a quick narrative sentence at the top of this section, saying, “As well as possessing the skills you have noted as requirements, other skills make me a more compelling prospect.”

Then list your applicable degrees, certifications, and other education. People often separate these, into education and skills, but there’s really no need – they all speak directly to your ability to do the job.

A master’s degree gets noticed quickly in a professional accountant resume, especially if you’ve been able to complete it in a shorter amount of time than is usual. Being a CPA or noting you’re currently pursuing a CPA or other similar, major qualification is important, too. It shows you know what is expected and that you are developing professionally even while seeking employment.

A truly well-crafted resume will cite examples of how a degree or qualification helped solve a real-life problem at work.

A familiarity with laws and legalities can be hard to get across on a resume but it’s a skill employers do look for and notice. If you’ve taken special courses or classes in these areas, note them. If you haven’t, look to learn this critical information, as well.

Any awards or special distinctions come at the end of the resume. There, those related to accounting come first. Then follow those only with those relevant to the position to which you are applying.

Essential Accounting Software Skills

Finding out ahead of time the software a company uses is a good step. That way, if you’re familiar with you can put it at the top. If you’re not, you can research it and learn it.

Finding out can be as simple as calling up and saying you’re applying for a job and wanted to know the main software the company uses.

If you have special skills in software programs used in accounting that go beyond the usual QuickBooks or Microsoft Excel, mention that, too. Many accountancy programs apply to specific industries, such as banking, warehouse management, or healthcare. Broadening your technical expertise to include some of these industry-specific packages is extremely useful.

Familiarity with Quickbooks, Sage50, Xero, Turbo Tax, or even something basic such as the Wave Accounting app for small business, goes a long way to increasing your attractiveness to a broad range of employers, as well.

Accountancy Employment History

Be as detailed as possible by bullet pointing responsibilities and accomplishments achieved in various job positions. When information is specific such as “managed databases for multiple company offices” or “reduced credit repayment to under 90 days for 80% of clients”, it demonstrates the changes you are likely to bring to the new job.

The most common way to present this past information is chronological, but it’s not necessary. Add only those positions where you did work relevant to the current position. Write a sentence at the top, telling your prospective employer that you’re doing this, so they don’t have to speculate why they see strange gaps in your employment.

This way of presenting your employment history is something different and therefore memorable, without being in any way confusing.

Final Impression

In your closing paragraph, explain why this role is important to you and what you do to keep your interest level high and your knowledge growing. Character traits you want to get across are that you’re organized, manage your time well, welcome change, and communicate effectively.

Broadcast Your Accounting Career Resume

Finally, with this great resume in hand, it needs to be seen.

The big firms are a great place to start, but don’t forget to post your resume on city or regional job boards. Finance and accounting organizations also post job listings, such as this one at the American Institute of CPAs. They also allow you to build career profiles, asking the questions they know employers want to know. Because accounting recruiters know the jobs and can organize them well, these type of sites are great places to have your resume seen.

Interviewing can be an intimidating task. Having a strong resume behind you will not only impress your prospective employer but, will give you confidence throughout your interview. If you have never built a resume before, use the above as an outline or give your existing one a refresh.

To learn more about the Master of Accountancy program at The University of Scranton, click here.