If you’ve ever wondered about the security of data stored on the cloud — and where the information actually goes — you’re not alone. Many providers and practice managers ask these and other important questions about cloud security.
We recently asked Saul Waizer, CareCloud’s Director of Cloud Technologies, for some answers.
Q: What’s the number one question you get about cloud security?
Saul Waizer, CareCloud’s Director of Cloud Technologies
A: ‘Is my data safe?’ — usually followed by ‘Where is my data?’ You cannot even compare the level of security with cloud-based security versus storing data on premises in a medical office. Most cloud-based vendors — including CareCloud — store information in highly secure data centers. Armed security guards, motion activated cameras and many additional protections make these large, dedicated centers more secure than smaller storage facilities or medical offices.
Q: How do you respond to physicians who believe locking up a server in their office is more secure than the cloud?
A: Some physicians want additional reassurance about security before they modernize to cloud-based practice software. All doctors need to protect patient information at all times. But let’s say it’s a plastic surgeon whose patients are exceptionally concerned about privacy. This surgeon might feel safer storing sensitive medical information in a computer they can actually see and touch in their office. But I would ask: ‘Is the server in a locked closet?’ ‘Do armed security guards protect the data?’ Commonly, the answer to both of these questions is ‘no.’
Next I would ask: ‘What is preventing anyone who knows what you do from breaking into your office and taking your computers?’ While moving beyond the office server might be scary, I find describing the security checks and access controls required to gain entry to a secure data center facility helps them make an educated decision about moving to the cloud.
Q: What are the leading benefits of cloud security for physicians and their practices?
A: There are many advantages, including:
* Guarded data – Whether we are talking about Verizon Terremark or another cloud enabled data center – most have multiple layers of physical security. They use motion controlled cameras; access control lists that restrict entry to a very limited number of people; and even those few allowed in are closely monitored while on premises.
* Data Redundancy – Some medical providers store all their information on a single computer in their office. They might feel better about EHR security with data backed up to an external drive, but that also can be stolen. With CareCloud, a redundant copy of your data gets automatically stored in multiple, secure locations. This redundancy not only secures additional backup copies of your information, but this strategy protects your information in the event of a fire or natural disaster affecting one location.
* Professional Security Management – Some physicians hire a tech-savvy relative or friend to set up the computer network at their practice. That may work well for most day-to-day operations. However, consider this: every day new threats arise around the internet — malicious attacks crafted specifically to exploit system vulnerabilities and steal information from computer systems all over the world. Does your practice employ a dedicated security team whose sole purpose is to detect, analyze and combat these threats?
Reputable cloud security firms like Amazon Web Services do. These companies have an army of trained security professionals that focus on such threats. It’s what they do. Just as physicians specialize in certain areas, these experts specialize in data security.
We take data security very seriously at CareCloud. We use Amazon Web Services and Verizon Terremark as part of a comprehensive approach to secure data. These protections are included in the per-provider monthly pricing of our meaningful use certified EHR and cloud-based practice management systems.
