eHealth Saskatchewan under increased risk of security breaches, provincial auditor finds
The Crown corporation responsible for safeguarding the digital health records of Saskatchewan residents is under an increased risk of security breaches and system failure – due to the lack of a finalized IT agreement with the SHA.
The concerns were laid out in the province’s most recent auditors report – released on Dec. 6.
ehealth Saskatchewan is the provincial Crown which oversees IT services to patients, health care providers, the Ministry of Health and the Saskatchewan Health Authority (SHA).
While an IT agreement between the SHA and eHealth does exist – the auditor’s report found that several key aspects were not finalized.
They include disaster recovery, service levels, security requirements and IT change management.
“Without an adequate agreement, the SHA risks being unable to effectively monitor the quality and timeliness of IT services delivered by eHealth, or know whether its critical IT systems and data are secure and will be restored in a reasonable timeframe in the event of a disaster,” the report read.
eHealth took over the SHA’s IT systems when the health authority moved them to its data centre in 2017.
The Crown is currently responsible for 35 IT systems deemed “critical” for the delivery of health care in Saskatchewan.
The report laid out two recommendations made by the auditor in 2019.
The first outlines installing centralized Network Access Controls (NAC) for all health sector agencies – while the second has to do with utilizing network security logs and scans to monitor systems for malicious activity.
Both have been partially implemented by eHealth.
The report went on to say that the organization’s five year disaster recovery roadmap includes assessing potential risks to IT systems and establishing appropriate measures for recovery.
The roadmap is expected to be finalized in 2023-24.
“eHealth needs to begin disaster recovery testing when its Roadmap is complete. Without fully tested disaster recovery plans, eHealth, the [SHA], Saskatchewan Cancer Agency, and the Ministry of Health may not be able to restore their critical IT systems and data (such as the personal health registration system or provincial lab systems) in a timely manner in the event of a disaster,” the recommendation read.
“As ransomware and cyberattacks are steadily rising and evolving, organizations (like eHealth) need disaster recovery plans that enable speedy and easy recovery of data from the point of attack.”
CTVNews.ca Top Stories
LIVE UPDATES Critical infrastructure 'successfully protected': Jasper park officials
Jasper National Park officials in an update said all critical infrastructure in the townsite has been 'successfully protected, including the hospital, emergency services building, both elementary and junior/senior schools, activity centre and wastewater treatment plant.'
BREAKING Canadian Olympic Committee removes women's soccer team's head coach over drone scandal
The Canadian Olympic Committee has removed women's national soccer team head coach Bev Priestman over a drone scandal, according to a press release from the organization.
'I was just shocked': Jasper lodge owner on seeing property destroyed by wildfire
On Wednesday night, the owner of Maligne Lodge in Jasper, Alta., was shocked to receive a photo of her business engulfed in flames.
Prince William's 2023 salary revealed in new report
Newly released financial reports show that William, the Prince of Wales, drew a salary of $42.1 million last fiscal year, his first since inheriting the vast and lucrative Duchy of Cornwall.
Yukon woman narrowly escapes bear attack, credits hair clip
A woman in Yukon believes her hair clip helped save her during a bear attack.
P.E.I. and New Brunswick among most overworked provinces in Canada, study finds
A study says Prince Edward Island is the second most overworked province in Canada based on average weekly hours worked, while New Brunswick falls in third.
Mary-Ellen Turpel-Lafond likely has Indigenous DNA: report
The Law Society of British Columbia says a DNA test shows a former judge and Order of Canada recipient accused of falsely claiming to be Cree "most likely" has Indigenous heritage.
Alberta premier says a third, perhaps half, of all Jasper buildings destroyed by fire
Alberta Premier Danielle Smith says early reports indicate a third and perhaps up to half of all buildings in the historic Rocky Mountain resort town of Jasper have burned in a wildfire.
OPINION Prince Harry: Press intrusion and the family rift explored in new doc
Prince Harry, the Duke of Sussex, has once again found himself at the centre of media attention following his recent interview as part of 'Tabloids on Trial,' an ITV documentary on phone hacking and tabloid intrusion.