Cyber Security
Cyber Security, also known as information technology security or electronic information security, is the practice of defending digital information and data stored on computers, servers, devices, systems, and networks. It is a multifaceted practice which provides security to protect information stored digitally from malicious attacks which attempt to steal, leak, or corrupt your private information.
The Australian Cyber Security Strategy has identified health care as a critical infrastructure sector. In line with this strategy, there will be a roll-out of the cyber health-check program that will offer a free, tailored assessment of cyber security maturity to small and medium businesses in Australia.
Protecting Your Practice
The security of your patient’s private information is your responsibility as a practice and a practitioner. There are some simple steps you can take to ensure that your practice is securing this private information effectively. For some simple steps to improving your cyber security, check out our Cyber Security Guide.
RACGP’s Information Security in General Practice guideline and AAPM’s Digital Handbook for Practice Management are useful tools to guide your practice’s cyber security policies in line with the standards for general practice for accreditation. The Australian Cyber Security Centre also has a Cyber Incident Response Plan Guide to assist businesses in establishing their business continuity plan. The Australian Digital Health Agency has also provided free online Digital Health Security Awareness modules for all health staff.
Responding to Data Breaches
If your practice is affected by a cyber security attack, ensure you understand how to respond. The RACGP Factsheet for responding to a cybersecurity incident contains helpful information if your system has been breached. Notifiable data breaches must be reported to the Office of the Australian Information Commissioner (OAIC) as soon as practicable. For more information on when and how to report a breach:
- Notifiable Data Breaches (NDB) scheme – Fact sheet – RACGP
- Data recovery tips – Do you have a response plan? – ADHA