A recent report from the provincial auditor general in Nova Scotia has highlighted concerns about the lack of effective cybersecurity measures in place for the province’s digital health networks. According to the report, there is a lack of accountability and coordination between the three government entities responsible for overseeing the system. This lack of cohesion is particularly worrying as the province increasingly relies on digital networks to store personal and sensitive health information.
To assess the state of cybersecurity in the digital health system, the auditor general’s office hired independent experts to conduct cybersecurity tests. The results of these tests revealed a “pervasive tolerance” for accepting risk and a failure to effectively manage ongoing cybersecurity risks. In response to these findings, the report recommends the creation of an information technology governance framework to better manage the digital health system, the completion of all outstanding cybersecurity assessments, and the implementation of regular, mandatory cyber awareness training for all health network users.
Currently, responsibility for cybersecurity in Nova Scotia’s digital health networks is shared between the departments of health, cybersecurity and digital solutions, and the province’s health authority. The lack of clear accountability and coordination among these entities has contributed to the vulnerabilities in the system that were identified in the report. The auditor general’s report underscores the urgent need for improved cybersecurity measures to protect the privacy and security of individuals’ health information.
The report’s findings highlight the risks associated with the province’s current approach to cybersecurity in digital health networks. The auditor general’s office has called attention to the need for a more comprehensive and proactive approach to managing cybersecurity risks in the digital health system. By implementing the recommendations outlined in the report, Nova Scotia can work towards enhancing the security of its digital health networks and better safeguarding the personal and sensitive health information of its residents.
Moving forward, it will be crucial for Nova Scotia to prioritize cybersecurity in its digital health networks and take steps to address the vulnerabilities and shortcomings identified in the auditor general’s report. By establishing a robust information technology governance framework, completing all outstanding cybersecurity assessments, and providing regular cyber awareness training for network users, the province can strengthen its cybersecurity posture and mitigate risks to its digital health systems. With proactive and coordinated efforts, Nova Scotia can enhance the resilience and security of its digital health networks and better protect the privacy and confidentiality of individuals’ health information.
