the Aged Care Today magazine featured articles

Organisations of all sizes have been the target of industrious criminals, exposing insufficient data management and security failures.

For some, this loss has been limited, but impactful and might include stolen social media accounts and compromised membership databases.

For others, there has been a more significant loss of client personal data and confidential commercial communications, which we know can result in devastating personal consequences for vulnerable individuals.

When a breach occurs, corporations must inform those affected, with advice that includes recommendations to take action to replace key identification – such as passports and driver’s licenses – and changing passwords for banking and superannuation accounts.

However, organisations have been reluctant to publicly disclose any cyber-attacks. This can be because of potential impact on their reputation, customer loyalty and financial stability.

Aged care providers have not been immune from cyber-attacks in recent years. With providers delivering a range of services, they are required to collect and document critical personal information including key safe codes and medical details, which may be accessed or on-sold in a cyber security breach.

According to the Australian Cyber Security Centre (ACSC), a major aged care provider was recently the victim of a ransomware attack with a partially successful attempt to encrypt and steal confidential data in order to seek ransom payment.

This underscores the importance of securing your client and business information, and ensuring you continue to upgrade your data security using the latest technologies available to you.

What you can be certain of, is that hackers will always be improving their methodologies, so you need to stay ahead of the game.

Perhaps addressing cyber security issues feels like a big task and you are unsure where to start, so that’s why it’s important to have a team of staff trained in this area, as well as the right systems and processes in place.

Providers need to be confident regarding responsibilities in relation to the information that your organisation holds, and your business capacity to both repel and respond to attacks – sometimes simultaneously and across numerous operating contexts.

Under the Australian Government Security of Critical Infrastructure Act 2018, health care including nursing care, is listed as a critical sector, and providers are advised to be aware of the cyber security obligations under this Act.

ACCPA in partnership with the Governance Institute of Australia, is offering ACCPA members a workshop on Cyber Security Risk, to support C-suite executives to understand the impact of this rapidly increasing threat to business continuity and potential personal liability.

Not to be missed, the online workshop will take place on 17 April 2024, and will be facilitated by leading cyber security expert Robbie Sinclair.

“Today, boards need to be aware of their responsibilities, noting that cybercrimes can result in financial, legal, regulatory, reputational, and customer impacts,” says Robbie.

“At its most devastating, a significant cyber security incident could mean the end of business operations.

“Community expectations have changed, and organisations can no longer afford to overlook cyber security risk.”