Maintenance Notice

Due to necessary scheduled maintenance, the JMIR Publications website will be unavailable from Wednesday, July 01, 2020 at 8:00 PM to 10:00 PM EST. We apologize in advance for any inconvenience this may cause you.

Who will be affected?

Accepted for/Published in: Journal of Medical Internet Research

Date Submitted: Jul 3, 2023
Date Accepted: May 17, 2024

The final, peer-reviewed published version of this preprint can be found here:

Insights From a Clinically Orientated Workshop on Health Care Cybersecurity and Medical Technology: Observational Study and Thematic Analysis

Straw I, Brass I, Mkwashi A, Charles I, Soares A, Steer C

Insights From a Clinically Orientated Workshop on Health Care Cybersecurity and Medical Technology: Observational Study and Thematic Analysis

J Med Internet Res 2024;26:e50505

DOI: 10.2196/50505

PMID: 38990611

PMCID: 11273071

“99.9% of clinicians wouldn’t expect a device to fail”: Insights from a clinically orientated workshop on healthcare cybersecurity and medical technology

  • Isabel Straw; 
  • Irina Brass; 
  • Andrew Mkwashi; 
  • Inika Charles; 
  • Amelie Soares; 
  • Caroline Steer

ABSTRACT

Background:

Healthcare professionals receive little training on the digital technologies that their patients rely on. Consequently, practitioners may face significant barriers when providing care to patients suffering from digitally-mediated harms (e.g., device failures, medical cybersecurity exploits). Here, we explore the impact of technological failures in clinical terms.

Objective:

Our study explored the key challenges faced by frontline healthcare workers during digital events, identified gaps in clinical training and guidance, and proposes a set of recommendation for improving digital clinical practice.

Methods:

A qualitative study involving a one-day workshop of fifty-two participants, internationally attended, with multi-stakeholder participation. Participants engaged in table-top exercises and group discussions focused on medical scenarios complicated by technology (e.g., malfunctioning ventilators, malicious hacks on healthcare apps). Extensive notes from five scribes were retrospectively analysed and a thematic analysis was performed to extract and synthesise data.

Results:

Clinicians reported novel forms of harm related to technology (e.g., geofencing in domestic violence, errors related to interconnected foetal monitoring systems) and barriers impeding adverse event reporting (e.g., time constraints, post-mortem device disposal). Challenges to providing effective patient care included a lack of clinical suspicion for device failures, unfamiliarity with equipment, and an absence of digitally tailored clinical protocols. Participants agreed that cyberattacks should be classed as Major Incidents, with the repurposing of existing crisis resources. Treatment of patients was determined by the role technology played in clinical management, such that those reliant on potentially compromised laboratory or radiological facilities were prioritised.

Conclusions:

Here, we have framed digital events through a clinical lens, described in terms of their end-point impact on the patient. In doing so, we have developed a series of recommendations for ensuring responses to digital events are tailored to clinical needs and centre patient care. Clinical Trial: N/A


 Citation

Please cite as:

Straw I, Brass I, Mkwashi A, Charles I, Soares A, Steer C

Insights From a Clinically Orientated Workshop on Health Care Cybersecurity and Medical Technology: Observational Study and Thematic Analysis

J Med Internet Res 2024;26:e50505

DOI: 10.2196/50505

PMID: 38990611

PMCID: 11273071

Download PDF


Request queued. Please wait while the file is being generated. It may take some time.

© The authors. All rights reserved. This is a privileged document currently under peer-review/community review (or an accepted/rejected manuscript). Authors have provided JMIR Publications with an exclusive license to publish this preprint on it's website for review and ahead-of-print citation purposes only. While the final peer-reviewed paper may be licensed under a cc-by license on publication, at this stage authors and publisher expressively prohibit redistribution of this draft paper other than for review purposes.