Digital Health:
Specialists for your Cyber Security

Structured determination of the organization's current information security situation. Analysis and identification of potential for improvement and derivation of concrete measures to achieve this, including prioritization.

Security awareness training poses a particular challenge in the healthcare sector, as different professional groups in multi-shift operations need to be reached in a way that is appropriate for the target group and as part of their daily work. Together with our partner, we can offer you e-learning courses optimized for mobile devices and flank them with additional measures (e.g. live hacking, workshops, cardboard displays, posters, handouts, quiz books, screensavers, etc.).

Security of medical devices: Sensitive data and high regulatory requirements set the bar high. Due to the combination of hardware and software, many devices are highly complex. Integrating the devices into the IT infrastructure increases efficiency, but also potentially creates new vulnerabilities. Carrying out necessary software security updates is a challenge in the day-to-day work of healthcare providers. Many good reasons to only commission experts to advise you on your security architecture or to carry out penetration tests on your devices.

Healthcare facilities in particular should be prepared for a cyber emergency so that they can respond quickly and effectively. Business continuity management (BCM) and incident playbooks provide the ideal basis for preparation. In the event of an acute cyber emergency, our experts offer the right support to keep your damage to a minimum and ensure that you can get back to your day-to-day business as quickly as possible.

Data protection is of central importance in the healthcare sector, as systems store a lot of personally identifiable and sensitive medical information. We support you in balancing the best possible protection of personal and health data with the requirement that only authorized persons have access to the data and that it is available at all times, especially in emergencies.

If you have more work to do in the area of cyber security than you have capacity for, our experienced experts can help out as (Chief) Information Security Officers on a mandate basis. They can take on individual projects or serve as an interim solution until you have found your CISO. The CISO can also call on other Redguard specialists to provide selective support.

We support you in the challenge of reconciling the enormous potential of cloud providers, automated business processes and the networking of medical devices with the requirements of data protection and data security. We also check the security configuration of your cloud platforms for you and support you in developing your cloud security governance.

Smaller organizations in particular have little personnel and financial capacity to take a holistic approach to cyber security. We therefore offer an attractive package for organizations with up to 50 employees. For CHF 4,950.00 you receive:

Digital Health Starter Package

• Assessment of the organization's current information security situation
• Vulnerability scan of all the organization's systems available externally via the Internet
• Report with the vulnerabilities discovered and a prioritized recommendation on how to address them

In order to increase the security awareness of your employees and minimize the probability of a successful phishing ransomware attack, we recommend that you offer access to a combined phishing and e-learning platform in addition to the starter package for 25 or more employees.

Because of more complex IT and a defined budget for cyber security, medium-sized organizations have often already taken a closer look at the topic. We offer individual services for these organizations. These include in particular:

• Conducting a phishing simulation to test whether your employees would fall for a phishing. Alternatively: access to a combined phishing and e-learning platform to increase employees' security awareness and minimize the likelihood of a successful phishing ransomware attack (Success Story medX Nordwest)
• Automated vulnerability scan of all the organization's systems accessible from outside via the internet
• Penetration testing of internal systems with automated scans supplemented by a test expert to determine how vulnerable the systems are if, for example, an attacker takes over a notebook
• Consulting in the area of data protection (success stories pharmaSuisse and eSanita)
• Temporary assumption of the management or support of the existing person responsible for security (CISOaaS) in the establishment or further development of information security management

In addition to the services mentioned above, we are happy to offer larger healthcare organizations further support in order to complement their human resources and specialist know-how with our expertise in handling healthcare data in the best possible way.

For example, the services of the "Cyber Security Officer as a Service" (CISOaaS) can be intensified:

Cyber Security Officer as a Service (CISOaaS)

• Contact point and expert advice for all questions relating to information security
• Development and maintenance of an information security management system (ISMS)
• Development of security guidelines and submission of implementation recommendations
• Interdisciplinary collaboration with all stakeholders within the organization
• Leading risk management and risk analysis
• Conception, preparation and implementation of training and awareness-raising measures (success story medX Northwest)
• Conducting internal and external IT security audits
• Assistance and support in the procurement/evaluation of IT applications, systems and services
• Support in the handling of security incidents
• Access to a combined phishing and e-learning platform. This allows you to train your employees efficiently and adapted to their everyday work and test them with a phishing simulation. This allows you to optimally improve your employees' phishing detection and minimize the chances of success of a ransomware attack via phishing emails