eHealth Saskatchewan under increased risk of security breaches, provincial auditor finds
The Crown corporation responsible for safeguarding the digital health records of Saskatchewan residents is under an increased risk of security breaches and system failure – due to the lack of a finalized IT agreement with the SHA.
The concerns were laid out in the province’s most recent auditors report – released on Dec. 6.
ehealth Saskatchewan is the provincial Crown which oversees IT services to patients, health care providers, the Ministry of Health and the Saskatchewan Health Authority (SHA).
While an IT agreement between the SHA and eHealth does exist – the auditor’s report found that several key aspects were not finalized.
They include disaster recovery, service levels, security requirements and IT change management.
“Without an adequate agreement, the SHA risks being unable to effectively monitor the quality and timeliness of IT services delivered by eHealth, or know whether its critical IT systems and data are secure and will be restored in a reasonable timeframe in the event of a disaster,” the report read.
eHealth took over the SHA’s IT systems when the health authority moved them to its data centre in 2017.
The Crown is currently responsible for 35 IT systems deemed “critical” for the delivery of health care in Saskatchewan.
The report laid out two recommendations made by the auditor in 2019.
The first outlines installing centralized Network Access Controls (NAC) for all health sector agencies – while the second has to do with utilizing network security logs and scans to monitor systems for malicious activity.
Both have been partially implemented by eHealth.
The report went on to say that the organization’s five year disaster recovery roadmap includes assessing potential risks to IT systems and establishing appropriate measures for recovery.
The roadmap is expected to be finalized in 2023-24.
“eHealth needs to begin disaster recovery testing when its Roadmap is complete. Without fully tested disaster recovery plans, eHealth, the [SHA], Saskatchewan Cancer Agency, and the Ministry of Health may not be able to restore their critical IT systems and data (such as the personal health registration system or provincial lab systems) in a timely manner in the event of a disaster,” the recommendation read.
“As ransomware and cyberattacks are steadily rising and evolving, organizations (like eHealth) need disaster recovery plans that enable speedy and easy recovery of data from the point of attack.”
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.6978503.1721990327!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg)
Arson attacks paralyze French high-speed rail network hours before start of Olympics
Outgoing French Prime Minister Gabriel Attal said that sabotage and arson that hit key parts of France's high speed rail network on the eve of the Olympics had 'a clear objective: blocking the high speed train network.'
Canadian Olympic Committee CEO says soccer coach Bev Priestman likely aware of spying
Canadian Olympic Committee chief executive officer David Shoemaker says the head coach of the national women's soccer team was likely aware drones were used to spy on an opposing country's practices in France.
'She led it the whole way': 18-year-old B.C. woman leads hikers to safety in Jasper National Park
As fire threatened people in Jasper National Park, Colleen Knull sprung into action.
DEVELOPING Recent rain, cooler weather limiting spread of wildfires in Jasper National Park
Cool and wet weather is making a difference in Jasper National Park.
Search for missing vulnerable 3-year-old child in Mississauga, Ont. continues
Police say the search for a vulnerable child who went missing in Mississauga, Ont. Thursday evening continues. Three-year-old Zaid, who is described as possibly non-verbal, was last seen at 6:20 p.m. in Mississauga’s Erindale Park, near Dundas Street West and Mississauga Road. He was not wearing shoes or socks at the time.
opinion 'Deadpool and Wolverine' review: A love letter to a bygone era
'Deadpool and Wolverine' is a showcase for the bromance stylings of its stars, who pull out all the stops to cap Fox's Marvel movies.
Stay inside, filter indoor air amid wildfire smoke, respirologist says
A Calgary respirologist is advising people to regularly check the outdoor air quality and stay inside as smoke from the Jasper wildfires blows into other parts of Alberta and possibly beyond.
Canada to bring home fewest Olympic medals since 2012, according to forecaster
Fewer Canadians are expected to reach the Paris podium than in the previous two Olympic Summer Games, a global data analytics company predicts.
Mary-Ellen Turpel-Lafond likely has Indigenous DNA: report
The Law Society of British Columbia says a DNA test shows a former judge and Order of Canada recipient accused of falsely claiming to be Cree "most likely" has Indigenous heritage.