Side Meetings

SMB306

Cybersecurity in Healthcare: Not If, But When – Preparing Health Systems for the Inevitable Breach

28
Jan

  • 09:00 - 12:30 HRS. (BKK)

  • Contact Person : Sinsucha Boontantrapiwat, sinsucha@moph.go.th

Organizers
  • Ministry of Public Health, Thailand
  • National Cybersecurity Agency, Thailand
  • Thai Medical Informatics Association
  • Health Systems Research Institute, Thailand
  • World Health Organization

As healthcare systems advance digital transformation efforts, cybersecurity risks threaten the integrity and availability of healthcare services and data. In Thailand, a joint initiative by the Thai Medical Informatics Association (TMI), National Cybersecurity Agency (NCSA), and the Thai Health Information Standards (THIS) Development Center, Health Systems Research Institute (HSRI) has successfully introduced health accreditation IT standards and auditing systems. This initiative has been implemented in approximately 20% of hospitals, but broader adoption and regional scaling remain a challenge. This side meeting will explore Thailand's progress and draw on experiences from other countries to address cybersecurity’s critical role in healthcare system strengthening. At the global level, the World Health Organization is developing guidance to address cybersecurity in health to respond to emergent threats.

  • Showcase Thailand’s Health IT and Cybersecurity Standards: Highlight Thailand's achievements through TMI, NCSA, and THIS, focusing on the auditing systems and standards introduced to secure hospital IT infrastructures.
  • Knowledge Exchange on Cybersecurity Best Practices: Facilitate an exchange of experiences and strategies between participating countries, particularly Australia and Singapore, regarding health data protection and IT security.
  • Strengthen WHO's Role in Global Cybersecurity Efforts: Discuss WHO’s support and initiatives to integrate cybersecurity into health systems strengthening and UHC frameworks. Thailand can present the national level perspective on the implementation of cybersecurity in large hospital network covering 902 hospitals. Lesson learned can be applied to other countries.
  • Development Partner Engagement: Explore financing and technical support opportunities from development partners, with specific attention to scaling cybersecurity solutions in low- and middle-income countries (LMICs).