Healthcare OT Cybersecurity Gaps Threaten Patient Safety

Hospitals and healthcare systems increasingly rely on Operational Technology (OT) devices, yet many lack dedicated OT cybersecurity personnel. Research indicates that only one full-time employee (FTE) with OT cybersecurity certification was found among the top 20 U.S. hospitals, compared to 73 in utility providers. The lack of investment in OT security personnel is concerning, given the operational dependence on OT for patient care and safety. The healthcare sector has historically faced ransomware attacks that target data theft rather than OT systems, which may divert security investments. This trend raises significant concerns about the vulnerability of healthcare environments to cyber threats that could disrupt patient care and operational continuity.

Key Points: • Only one OT cybersecurity certified FTE found among the top 20 U.S. hospitals. • Healthcare systems are increasingly reliant on OT devices like IoMT, impacting patient safety. • Ransomware attacks in healthcare often focus on data theft, diverting attention from OT security.