Cybersecurity in
health care
OKIOK works with teaching hospitals, clinical laboratories, research institutes and health network suppliers, from identity governance to hundreds of penetration tests.
Challenges
- Strict regulatory and confidentiality requirements: Law 25, AHSSS and Québec TGV certification
- Protection of sensitive patient and clinical data
- Continuous availability of critical clinical systems and services
- Securing legacy medical devices and connected equipment
- Complex identity and access management: large, heterogeneous populations, users with multiple personas, and periodic mass onboarding and offboarding of residents
How we help our clients
Identity and access management (IAM)
Deployment of RAC/M Identity at two of Québec’s five teaching hospitals to strengthen IAM maturity and processes, including the automated mass onboarding and offboarding of residents at the start and end of each term
Deployment of RAC/M Identity at a medical laboratory and supplier to strengthen IAM maturity and processes, and to meet its compliance requirements
Secure file transfer
Deployment of S-Filer Portal at multiple health care organizations
Penetration tests
Hundreds of internal and external penetration tests
Penetration tests required for TGV certification
Cybersecurity consulting
Definition of a corporate security architecture
Definition of an IAM program
Preparation and support for TGV certification
Incident response
Dozens of support and recovery engagements at clients across the sector
Custom solutions
Cryptographic anonymization for longitudinal studies
Unique identifiers generator for national patient and practitioner registries
Items above reflect work delivered across multiple client engagements.
Case studies
Case study
Complex identities, simplified
A major university teaching hospital governs overlapping clinical and academic identities across tens of thousands of people, granting timely access as each session begins.
White paper
RAC/M Identity & CoreView: Québec health & social services
How RAC/M Identity complements CoreView across Québec’s health and social services network (CISSS/CIUSSS) to meet identity and access management obligations amid the DSQ rollout.
Every client is different
From clinical availability to patient data and access governance, let’s focus on your organization’s priorities.