eHealth Saskatchewan under increased risk of security breaches, provincial auditor finds
The Crown corporation responsible for safeguarding the digital health records of Saskatchewan residents is under an increased risk of security breaches and system failure – due to the lack of a finalized IT agreement with the SHA.
The concerns were laid out in the province’s most recent auditors report – released on Dec. 6.
ehealth Saskatchewan is the provincial Crown which oversees IT services to patients, health care providers, the Ministry of Health and the Saskatchewan Health Authority (SHA).
While an IT agreement between the SHA and eHealth does exist – the auditor’s report found that several key aspects were not finalized.
They include disaster recovery, service levels, security requirements and IT change management.
“Without an adequate agreement, the SHA risks being unable to effectively monitor the quality and timeliness of IT services delivered by eHealth, or know whether its critical IT systems and data are secure and will be restored in a reasonable timeframe in the event of a disaster,” the report read.
eHealth took over the SHA’s IT systems when the health authority moved them to its data centre in 2017.
The Crown is currently responsible for 35 IT systems deemed “critical” for the delivery of health care in Saskatchewan.
The report laid out two recommendations made by the auditor in 2019.
The first outlines installing centralized Network Access Controls (NAC) for all health sector agencies – while the second has to do with utilizing network security logs and scans to monitor systems for malicious activity.
Both have been partially implemented by eHealth.
The report went on to say that the organization’s five year disaster recovery roadmap includes assessing potential risks to IT systems and establishing appropriate measures for recovery.
The roadmap is expected to be finalized in 2023-24.
“eHealth needs to begin disaster recovery testing when its Roadmap is complete. Without fully tested disaster recovery plans, eHealth, the [SHA], Saskatchewan Cancer Agency, and the Ministry of Health may not be able to restore their critical IT systems and data (such as the personal health registration system or provincial lab systems) in a timely manner in the event of a disaster,” the recommendation read.
“As ransomware and cyberattacks are steadily rising and evolving, organizations (like eHealth) need disaster recovery plans that enable speedy and easy recovery of data from the point of attack.”
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.7029443.1725744633!/httpImage/image.png_gen/derivatives/landscape_800/image.png)
Police release video of Toronto plaza shooting that killed university student
A university student from Brampton was killed when two shooters fired indiscriminately into a crowded plaza in Toronto last month in what police say was a 'cowardly act.'
'Hopeless and helpless': Regina mother seeks help to treat rare spinal disease
Mary Grace Rico is seeking help in getting treatment for a rare spinal condition.
The iPhone is getting a 'glow' up. What to expect from Apple's Monday event
Apple excited fans with its vision for its 'Apple Intelligence' artificial intelligence system earlier this year. Now, it's time for the company to prove it really works.
No more porta-potties at B.C. construction sites starting Oct. 1
What some B.C. construction workers describe as the worst aspect of their jobs will be coming to an end next month, the province announced.
Trump campaigns in Wisconsin just days ahead of debate with Harris
With just days to go before his first — and likely only — debate against U.S. Vice-President Kamala Harris, former U.S. president Donald Trump leaned into his familiar grievances about everything from his indictments to the border as he campaigned in one of the most deeply Republican swaths of battleground Wisconsin.
'Extremely vigorous' wildfire activity in central B.C. prompts crews to back off for safety
The wildfire fight in central B.C. intensified Friday, according to officials.
They were due to leave for their dream cruise in May. Three months on they’re still stuck at the departure port
It was the years-long cruise that was supposed to set sail, but saw its departure postponed… postponed… and postponed again.
Aryna Sabalenka beats Jessica Pegula to win the U.S. Open for her third Grand Slam title
Aryna Sabalenka got past Jessica Pegula 7-5, 7-5 in a rollicking U.S. Open women’s final Saturday to win her first championship at Flushing Meadows and third Grand Slam title of her career.