– IT security has improved, but it is objectionable that we still find significant weaknesses. Computer attacks can have major consequences for the operation of hospitals and for patients’ safety, says Auditor General Karl Eirik Schjøtt-Pedersen in a press release.
In 2020, the National Audit Office published a report which revealed major weaknesses in IT security in Norwegian hospitals.
An important part of the investigation was simulated computer attacks which gave the National Audit Office a large degree of control over the IT systems in three out of four health regions, and access to large amounts of sensitive health information in all regions.
The findings were so serious that they resulted in the National Audit Office’s strongest criticism.
Could change data in patient records
In the follow-up investigation that the National Audit Office has now carried out, it is concluded that IT security has been strengthened since 2020, after the Ministry of Health and Care, the regional health organizations and hospitals have followed up and initiated measures to improve the weaknesses that were discovered.
Nevertheless, much remains to be done.
In the follow-up investigation, the National Audit Office has carried out new data attacks in two of Norway’s four health regions.
In one of the regions, they could, among other things, have put the hospital’s systems for storing patient data out of action for a longer period. In both places, they were able to extract large amounts of patient information, change data in patient records or delete databases on which medical systems are based.
– It is disturbing that it was once again so easy for us to take control. Here, IT security must be tightened. Patients and residents must be able to trust that personal data will not go astray, says Schjøtt-Pedersen.
Will require close follow-up
After the investigation, the National Audit Office gives the health institutions the assessment “worthy of criticism”, which is the middle of three levels of criticism.
The National Audit Office clarifies that Health and Care Minister Jan Christian Vestre (Ap) says that the case is very demanding and that there will be a need for close follow-up further.
– These are important signals from the minister, but the ministry, the health regions and the individual hospitals have a way to go before they reach their goal. The National Audit Office will therefore follow the case further, says Schjøtt-Pedersen.
Read also: Expert on new Trump effect in NATO: – That is my great fear (+)
Read also: Maja Lunde: – I think people will recognize the book in the film (+)
Read also: – This is a historic day for all women