5 Common Network Monitoring Mistakes and How to Fix Them with Zero Trust

The network monitoring pillar lets security professionals gain visibility into a healthcare organization’s network.

The functions of network monitoring include network segmentation, threat protection and encryption, as outlined in the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model.

Network monitoring involves having the controls in place to be able to manage network traffic as well as medical devices, ports and protocols, and then make decisions on what should flow through the network, according to Gregory.

Here are five common network monitoring mistakes and ways zero trust can fix them.

1. Unequal Application of Access Rules Across the Organization

Many healthcare organizations fail to equally enforce policies around access, such as multifactor authentication, Gregory says. Healthcare systems apply preferential treatment regarding access and implement policy exceptions, he says.

“It’s the fidelity and the extent to which you implement these technologies that are going to be effective,” Gregory says.

Click the banner below to dive deeper into zero trust and its benefits for healthcare.

2. Lack of Senior-Level Investment in Network Monitoring

Sometimes senior-level executives fail to commit to investing in network monitoring, according to Gregory.

Plans may not align with their business, or they may lack a clear understanding of the need for healthcare monitoring in their organizations, Gregory says.

“When we don’t see the investment in the right-sizing of the resources in house —and remember, this has to be a 24/7 capability — that’s one of the largest mistakes,” Sickles says. “If you can’t do it yourself with a commitment of resources, you have to have a partner to help you with this.”

Gaining commitment from stakeholders involves education, says Itai Greenberg, chief strategy officer at Check Point Software Technologies.

“Healthcare organizations need to develop a security strategy and educate users, management, operations and system developers on what the policy is and their role in keeping patient information safe,” Greenberg says.

DISCOVER: How CDW services can help healthcare organizations implement zero trust.

3. Implementing Incompatible Technologies in the Network

Many healthcare organizations have legacy systems that are no longer compatible with existing technologies. They can’t be patched and may lack code, but the technology is still left in place, according to Gregory.

“To implement zero trust, there has to be interoperability and orchestration between the applications and networking components and devices,” Gregory says. “Anything that is on the network needs to be able to talk with everything else.”

Zero trust also involves securing all the Internet of Medical Things (IoMT) devices on the network, according to Greenberg.

“With no security, attackers will use vulnerable IoMT devices to breach your perimeter defenses. Zero trust starts with discovery of IoMT devices and then autonomously applies a least-privilege zero-trust security policy,” Greenberg says.

4. Proper Deployment and Communication of Controls

Sometimes healthcare organizations are unable to properly implement network controls because they can’t advocate for what the controls will do, Gregory says.

In addition, security controls must be deployed so they keep up with the speed of business innovation, Greenberg says.

“If security cannot move at the speed of business innovation, the security controls will most likely be disabled, exposing the business to attack,” Greenberg says. “There needs to be a balance. To make it easier, Security as Code should be integrated into the application DevOps process as early as possible.” 

5. Lack of Segmentation in Healthcare Networks

With an expanding footprint of devices to secure wherever users are accessing the network, healthcare systems sometimes don’t implement proper segmentation, Greenberg says.

Segmentation consists of adding firewalls at network boundaries as well as deploying device-level protections at endpoints, for mobile devices and IoMT devices, and for application workloads, he notes.

“To protect against this expanded risk, the network has to be segmented so a zero-trust policy can be implemented,” he says.