Evidence map›Paper›PMID 27437066›Full record

ArticleApplied clinical informatics2016

A Socio-Technical Approach to Preventing, Mitigating, and Recovering from Ransomware Attacks.

Dean F Sittig, Hardeep Singh

Abstract read
In one paragraph

Article in Applied clinical informatics, 2016. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 20 papers, 2 of them syntheses that pooled it.

0numbers the graph read from it
0cells of the map it votes in
20citing papers in PubMed, 2 pooled it
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

20 citing papers in PubMed, 2 syntheses or guidelines pooled it.

  1. Pooled it
  2. EARS to cyber incidents in health care.Journal of the American Medical Informatics Association : JAMIA · 2019
    Pooled it
  3. Review
  4. Article
  5. Article
  6. Article
  7. Article
  8. Article
  9. Review
  10. Review
  11. Article
  12. Artificial Intelligence and the Implementation Challenge.Journal of medical Internet research · 2019
    Article
  13. Article
  14. Article
  15. Article
  16. Article
  17. Article
  18. Toward More Proactive Approaches to Safety in the Electronic Health Record Era.Joint Commission journal on quality and patient safety · 2017
    Article
  19. Review
  20. Review
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

2 authors.

Dean F SittigUniversity of Texas Health Science Center at Houston , School of Biomedical Informatics and UT-Memorial Hermann Center for Health Care Quality and Safety, Houston, Texas.
Hardeep SinghHouston Veterans Affairs Center for Innovations in Quality, Effectiveness and Safety, Michael E. DeBakey Veterans Affairs Medical Center, Houston, Texas; Section of Health Services Research, Department of Medicine, Baylor College of Medicine, Houston, Texas.

Funding

Decision Making and Clinical Work of Test Result Follow-up in Health IT SettingsR01HS022087 · AHRQ · BAYLOR COLLEGE OF MEDICINE · PI SINGH, HARDEEP · 2013 to 2016
$2.0M
Improving Direct Notification of Abnormal Test Results via Patient PortalsR21HS023602 · AHRQ · BAYLOR COLLEGE OF MEDICINE · PI SINGH, HARDEEP · 2014 to 2015
$300k
AHRQ HHS R01 HS022087AHRQ HHS R21 HS023602
6 · The paper itself

Abstract

Recently there have been several high-profile ransomware attacks involving hospitals around the world. Ransomware is intended to damage or disable a user's computer unless the user makes a payment. Once the attack has been launched, users have three options: 1) try to restore their data from backup; 2) pay the ransom; or 3) lose their data. In this manuscript, we discuss a socio-technical approach to address ransomware and outline four overarching steps that organizations can undertake to secure an electronic health record (EHR) system and the underlying computing infrastructure. First, health IT professionals need to ensure adequate system protection by correctly installing and configuring computers and networks that connect them. Next, the health care organizations need to ensure more reliable system defense by implementing user-focused strategies, including simulation and training on correct and complete use of computers and network applications. Concomitantly, the organization needs to monitor computer and application use continuously in an effort to detect suspicious activities and identify and address security problems before they cause harm. Finally, organizations need to respond adequately to and recover quickly from ransomware attacks and take actions to prevent them in future. We also elaborate on recommendations from other authoritative sources, including the National Institute of Standards and Technology (NIST). Similar to approaches to address other complex socio-technical health IT challenges, the responsibility of preventing, mitigating, and recovering from these attacks is shared between health IT professionals and end-users.

Indexed as

Computer Communication NetworksComputer SecurityElectronic Health RecordsDelivery of Health Carecybersecurityelectronic health recordHealth information technologyransomwaresocio-technical

Identifiers

PMID27437066
PMCPMC4941865

What OpenQuestion holds

Textmetadata
LicenceCC BY
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.