Monday | 8 September, 2008
Computerworld
Temperatures run high in IT health security debate
Michael Crawford 09/09/2005 11:42:38

Computerworld Buyer's Guide - Vendors Matched to this Article
Related Features
  • +

    Your World. . . Hacked 02/10/2007 10:51:23

    As your business becomes more collaborative and global, the risks to your company’s trade secrets rise proportionally. Fortunately, there are new strategies to protect the data that allows you to compete
    The call to Bob Bailey, an IT executive with a major US government contractor, came on an otherwise ordinary day in October 2003. "Why are you attacking us?" demanded the caller, an IT leader with a Silicon Valley manufacturer. He wanted to know why Bailey's company had launched a denial-of-service attack against his network
  • +

    Ticked Off at Tick the Box Mentality 04/02/2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
RSS Feeds

The author of a study into firewalls prepared for general practitioners under the Broadband for Health program claims it has been dumbed down so much by federal health bureaucrats, the document is now virtually useless as an IT security guide.

The author Dr Horst Herb, director of the Dorrigo Medical Centre in NSW, is demanding his name be stripped from the final report.

Once a systems auditor, penetration tester and mainframe security analyst for Siemens, Dr Herb spent the last five months advising the government on minimum firewall standards for GPs.

Horst said he believes the government is not serious about IT security when it comes to e-health.

Although Herb's work has been published as part of the GPCG (General Practice Computing Group) Security Firewall Guidelines, he said many core technical aspects and product-specific analysis had been stripped out of the recommendations.

As a result, he said, the document prepared as an IT security guide for GPs has reached the point of irrelevance.

A Department of Health and Ageing spokesperson, asked to respond to Dr Herb's allegations, said the submitted report was "overly-technical" and had to be "simplified extensively" so that could GPs understand it.

"The original document was very technical," Herb said. "But that was the whole point, to raise interest and technical understanding of what is involved for GPs. Even if the doctors were to commission out implementing firewalls they would still need to emulate skills of the person that set it up, because generally, there is no formal qualification for implementing firewalls or formal liabilities for firewalls," Herb said.

Herb also warned many IT security products are not strong enough to protect highly sensitive, personal information.

"The main problem I had was with personal firewalls, which is just software on a computer which is, in my opinion pointless in a surgery scenario because they have too many vulnerabilities - all it takes is downloading software to disable it. GPs need a dedicated firewall where no user can dabble with it," he said.

"Surgeries should not rely on basic or personal firewalls. This [detail] was edited out of the original report, mainly so [telecommunications vendors] can just push a default firewall setting as acceptable - it is just pure nonsense."

Herb said while the strong security message was being lost on GPs as a result, though he is glad some security information has been released. However, Herb is insisting his name be stripped from the report, because he does not want to be held liable for anyone considering a personal firewall as a viable IT security solution for doctors.

Since the report was published, the federal government has axed funding for GPCG, which provided IT support and advice for doctors and clinicians. It ran for eight years under an annual, million-dollar government grant.

The Department of Health and Ageing spokesperson said all doctors involved with the now defunct General Practice Computing Group considered the original document to be far too complicated. However, when it was "simplified extensively", they gave it their full endorsement.

The department claims the document has since been well received by doctors, despite the GPCG being disbanded.

Computerworld Buyer's Guide - Vendors Matched to this Article
Market Place

Computerworld Member Login


 

Prioritizing Services with IT Service Management (ITSM)

Computerworld Live Webinar
Wednesday 20th, August 2008
11:00am EST (Sydney, Australia)

To be repeated on:

Thursday 4th, September 2008
11:00am EST (Sydney Australia)

Sign up and receive a free copy of The Forrester WaveTM Service Desk Management Tools, Q2 2008 at the conclusion of the Webinar.

Attend and discover:

  • How to deliver value to your business through ITSM
  • Best practice ITSM implementation
  • Why emphasis is changing from optimizing IT management processes to better servicing customers and demonstrating real dollar value
  • If service-oriented ITSM is best for your business
Whitepaper

How to Beef Up Your Sales Pipeline

Our economy may be heading towards a recession. Sales rates are dropping. Promotional campaigns are proving less effective than you would like. So how do you continue to grow your business and bring home the sales in such an environment? Download this white paper now to find the answers.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links