Nova Scotia health data at risk due to ineffective cybersecurity: report
Nova Scotia doesn't provide effective cybersecurity for its digital health networks, and as a result is exposed to unnecessary risk, says a new report by the province's auditor general.
Kim Adair's report published Tuesday found a lack of accountability and collaboration between the three government entities that oversee the system: the health department, the cybersecurity and digital solutions department, and Nova Scotia's health authority.
The situation is problematic because of the province's growing reliance on digital networks to store people's personal and sensitive health information, the report says.
Citing attacks in other provinces, like Newfoundland and Labrador and Ontario, she said, "We've seen several health-care organizations fall victim to serious cyberattacks that have compromised sensitive information, disrupted patient care and disabled networks."
Nova Scotia's "lack of IT governance gives minimal accountability for cybersecurity during a time of rapid expansion" of the province's digital health network, Adair said.
The report says key governance structures established to manage and monitor the network, along with cybersecurity efforts, were abandoned by 2022.
The auditor said her office hired Toronto-based independent experts from Packetlabs to run cybersecurity tests between April 2021 and June 2023, which revealed a "pervasive tolerance" for accepting risk and a failure to manage ongoing risks. More specifically, the report found that external health sector contract holders -- such as pharmacies and doctors' offices -- weren't required to include cybersecurity training before accessing the network.
The report also said testing showed most proposed technology projects that added to or changed the data flow or architecture of the digital health system didn't fully comply with a mandatory three-phase review process put in place by a government panel. As well, the report said the review board allowed projects to connect to the network without meeting cybersecurity standards.
To strengthen the system, the 42-page report makes 20 recommendations, including the creation of an information technology governance framework to manage the digital health system, the completion of all outstanding cybersecurity assessments and regular mandatory cyber awareness training for all health network users.
Adair said her office would follow up on the progress of the digital health network a year from now. So far, she said, response from the government agencies involved has been positive.
In an emailed statement, a provincial spokesperson said the departments of health and of cybersecurity and digital solutions, along with Nova Scotia's health authority said changes in the system are already underway.
"We are making investments and reducing risk as much as possible, while we modernize our digital health infrastructure. We have already begun work on many of the auditor general's recommendations and will continue to work on the rest," spokesperson Rachel Boomer said in an email.
The province said it will not disclose details of the changes underway to prevent further cyber threats from bad actors.
This report by The Canadian Press was first published Oct. 22, 2024.
For more Nova Scotia news visit our dedicated provincial page.
CTVNews.ca Top Stories
Trump threatens to try to take back the Panama Canal. Panama's president balks at the suggestion
Donald Trump suggested Sunday that his new administration could try to regain control of the Panama Canal that the United States “foolishly” ceded to its Central American ally, contending that shippers are charged “ridiculous” fees to pass through the vital transportation channel linking the Atlantic and Pacific Oceans.
Man handed 4th distracted driving charge for using cell phone on Hwy. 417 in Ottawa
An Ottawa driver was charged for using a cell phone behind the wheel on Sunday, the fourth time he has faced distracted driving charges.
Wrongfully convicted N.B. man has mixed feelings since exoneration
Robert Mailman, 76, was exonerated on Jan. 4 of a 1983 murder for which he and his friend Walter Gillespie served lengthy prison terms.
Can the Governor General do what Pierre Poilievre is asking? This expert says no
A historically difficult week for Prime Minister Justin Trudeau and his Liberal government ended with a renewed push from Conservative Leader Pierre Poilievre to topple this government – this time in the form a letter to the Governor General.
opinion Christmas movies for people who don't like Christmas movies
The holidays can bring up a whole gamut of emotions, not just love and goodwill. So CTV film critic Richard Crouse offers up a list of Christmas movies for people who might not enjoy traditional Christmas movies.
More than 7,000 Jeep SUVs recalled in Canada over camera display concern
A software issue potentially affecting the rearview camera display in select Jeep Wagoneer and Grand Cherokee models has prompted a recall of more than 7,000 vehicles.
'I'm still thinking pinch me': lost puppy reunited with family after five years
After almost five years of searching and never giving up hope, the Tuffin family received the best Christmas gift they could have hoped for: being reunited with their long-lost puppy.
10 hospitalized after carbon monoxide poisoning in Ottawa's east end
The Ottawa Police Service says ten people were taken to hospital, with one of them in life-threatening condition, after being exposed to carbon monoxide in the neighbourhood of Vanier on Sunday morning.
New York City police apprehend suspect in the death of a woman found on fire in a subway car
New York City police announced Sunday they have in custody a “person of interest” in the early morning death of a woman who they believe may have fallen asleep on a stationary subway train before being intentionally lit on fire by a man she didn't know.