Image: Getty Images/ For illustrative purposes
Cisco has identified five priority actions for healthcare organizations in the UAE to strengthen cybersecurity and build digital resilience as hospitals and providers face rising threats to patient data.
The healthcare industry is a key target for cyberattacks globally due to the value of patient records, reliance on outdated systems, and human vulnerabilities, Cisco said.
In the UAE, the risks are amplified by the sector’s rapid digital transformation, with the Department of Health Abu Dhabi already setting standards through its ADHICS cybersecurity framework.
Fady Younes, Cisco’s managing director for cybersecurity in the Middle East, Africa, Türkiye, Romania and CIS, said cybersecurity “is no longer just an IT issue. It is a core component of patient services and enabling digital resilience in healthcare.”
Cisco on protective steps healthcare organisations should take
Healthcare organisations should focus on five main actions:
-
Treat obsolete IT systems as systemic risks: Outdated systems and medical devices pose direct threats to care delivery. Regulators should push providers to identify and replace vulnerable legacy infrastructure.
-
Reimagine IT spending models: Hospitals need budget flexibility between capital and operational expenditures to adopt subscription-based cybersecurity solutions, Cisco said.
-
Make cybersecurity training a strategic priority: Staff across all levels should undergo regular, sector-specific training, including simulations to maintain care during system downtime.
-
Encourage resource sharing and collaboration: Smaller hospitals lacking dedicated cybersecurity teams can benefit from regional partnerships, joint exercises, and shared threat intelligence.
-
Prioritise protection of electronic health records (EHRs): EHRs must meet strict security standards including encryption, access controls, and interoperability safeguards to prevent breaches.
Cisco said building a resilient healthcare ecosystem requires government, regulators, providers, and technology partners to embed security culture and address systemic risks together.
Read: Cybersecurity – Why ‘public-private-people’ partnerships hold the key
