Once a problem squarely in the realm of IT, cyber attacks on medical devices—including viruses and information-stealing malware—are now a threat looming large enough to necessitate biomed intervention. As hackers get smarter about infiltrating health care networks, hospitals need to get more organized in how they deal with them.

While medical devices haven't been targeted specifically by hackers yet, they may become corrupted or damaged just the same if a hospital's network is breached, according to Axel Wirth, national health care solutions architect with computer security company Symantec Corp, out of Mountain View, Calif.

"Medical devices tend to be a weak spot" in a hospital's network, he says. This is especially true of older equipment. Since device configuration lies in the hands of the manufacturer in the US, biomeds need to cement a good working relationship with their vendors to make sure equipment is properly patched and up to date. Hospitals with several of the same older device are especially vulnerable. If networked, all devices could be affected during an attack.

24x7 will be focusing more on the growing threat of cyber attacks in an upcoming Focus On article, but first we want to hear what you've seen and heard at your facility. Have you spoken to your IT department? What's the best way to approach this subject? Also feel free to share any tips for working with corrupted equipment.

In our June issue, the “Focus On” section featured advice from leaders at four different associations from across the country. These members have served in various leadership roles and continue to participate in their activities. We asked their advice on how to start an association and also what they had done to help it expand. The answers—as varied as the location of these four associations—highlight the need for commitment from members to help them grow.

Are you part of an association? What best practices can you add? Comment here and share your ideas.  

At the recent AAMI conference in Tampa, Fla, I spoke with Mike Reed, general manager of education services with GE Healthcare. He said that there were a number of hospitals that had paid for training but had not sent the techs due to financial constraints. 

Mike said: “We’ve seen instances where hospitals purchase tuition but the biomeds weren’t able to attend because they couldn’t get the money to travel to class.”

A serious problem, considering how important training is to everyone. When budgets tighten and “no travel” policies are implemented, what’s the solution? 

Mike’s suggestion, get the whole package. “Get the training that also includes lodging and airfare.” 

A great suggestion, thanks Mike! We’d also like to know your best practices for making sure training that’s been paid for is received. We hope you’ll comment here and share your ideas, to the benefit of everyone.

The Service Solutions article in the June issue of 24x7 focused on an overview of the electronic medical record, or EMR. The thorough article provided insight from biomeds working on the implementation process. One of those interviewed, Derrick W. VanKampen, a biomedical device integration analyst 2 in the IT department of Tampa General Hospital in Tampa, Fla, shared this information:

“There are a lot of items that facilities and clinical engineering will have to look at, assess, and complete in a very short amount of time, which means there are a lot of organizations that are going to have a lot of work coming their way very fast.”

The article probed decisions, testing, responsibilities, and other aspects of getting an EMR operational in a facility, and we’d like to know if the article helped you, and also if you’re working on EMR implementation in your hospital. If you are, please share your insight and best practices to smooth the way for those who will have to work on this—sooner rather than later. Thanks!