80% of medtech firms suffered a cyber attack in the past five years

Survey finds that just 18% of organizations believed their medical device security was strong

CAT scan machine with IoT markings in the foreground

Medical internet of things (IoT) devices promise great benefits, but companies working with them must tighten their cyber security, according to new research from Irdeto.

The security company surveyed senior executives at Fortune 1000-sized US-based companies working in the medical device sector to assess their cyber security stance.

Responses to the survey suggested a high level of confidence in medical IoT security among just one in five companies, with 18% believing their medical device security was strong. Slightly fewer (13%) believed they were well-prepared to mitigate future risks, while 18% weren’t prepared at all.

These responses correlated with the rate of reported security incidents. The survey found 80% of companies suffered at least one cyber attack in the past five years, with over two-thirds (67.5%) sustaining multiple attacks.

Poor cyber security is often linked to a lack of visibility, as you can’t manage what you can't see. Most companies (78%) found device inventory management problematic, often because of bureaucracy. Many failed to patch the devices they could see, warned the report. And if they did patch them, they used inefficient and possibly dangerous methods, such as passing patches around on USB keys.

Related Resource

Security analytics for your multi-cloud deployments

IBM Security QRadar SIEM solution brief

Security analytics for your multi-cloud deployments - whitepaper from IBMDownload now

Most companies want to mitigate their medical device cyber security problems by turning to the cloud, with 48% advocating for this solution. This clashes with a separate Trend Micro survey that revealed significant cloud adoption challenges, including privacy and security concerns.

When assessing the importance of cyber security, companies concentrated heavily on compliance rather than the risk of business disruption or financial losses. Of the respondents, 80% cited regulatory requirements as a driving factor for cyber security, with just over two-thirds pointing to brand protection as an issue. Only 2.5% worried about ransomware or financial losses.

Understanding those regulations was not universal, with 40% saying they had a good handle on new cyber security rules. Another 45% said their cyber security knowledge was adequate. A worrying 15% claimed to have no knowledge of regulations at all. Some companies were escalating regulatory compliance to board level, while others called in their legal teams. Other companies working with medical devices focused on external help.

Featured Resources

2021 Thales access management index: Global edition

The challenges of trusted access in a cloud-first world

Free download

Transforming higher education for the digital era

The future is yours

Free download

Building a cloud-native, hybrid-multi cloud infrastructure

Get ready for hybrid-multi cloud databases, AI, and machine learning workloads

Free download

The next biggest shopping destination is the cloud

Know why retail businesses must move to the cloud

Free Download

Recommended

NIH renews COVID research contract with Palantir
Cloud

NIH renews COVID research contract with Palantir

4 Oct 2021
Allurion launches remote patient weight-loss monitoring service
analytics

Allurion launches remote patient weight-loss monitoring service

21 Sep 2021
JFrog acquires Upswift for edge-based DevOps expansion
mergers and acquisitions

JFrog acquires Upswift for edge-based DevOps expansion

13 Sep 2021
Sensome’s AI-powered stroke guidewire begins human trials in Australia
artificial intelligence (AI)

Sensome’s AI-powered stroke guidewire begins human trials in Australia

13 Sep 2021

Most Popular

Best Linux distros 2021
operating systems

Best Linux distros 2021

11 Oct 2021
Veritas Backup Exec 21.3 review: Covers every angle
backup software

Veritas Backup Exec 21.3 review: Covers every angle

14 Oct 2021
HPE wins networking contract with Birmingham 2022 Commonwealth Games
Network & Internet

HPE wins networking contract with Birmingham 2022 Commonwealth Games

15 Oct 2021