Cybersecurity for life sciences

Markets we serve > Life sciences > Cybersecurity services for life sciences

Cybersecurity services for life sciences

Our suite of services can be easily customized to your specific needs—delivering a complete solution to help develop, assess and maintain an effective risk management and security program and security controls to meet industry’s changing needs.

Cybersecurity concerns within life sciences are real, especially with the coronavirus pandemic. In a rare, joint alert, the U.S. and the U .K. warned that malicious, brute-force cyber activity has intensified against organizations involved in fighting the virus. A bipartisan group of U.S. senators recently asked cybersecurity officials to increase monitoring and, if needed, approve counterstrikes against foreign cyber-attackers targeting the U.S. health care system and pharmaceutical companies.

Cyberattacks endanger proprietary information about patented drugs and data on drug advances and technologies. These include research and development (R&D) information and trade secrets, confidential formulas, clinical trial data and the personal information of patient participants in such trials.

In addition to enterprise IT networks, of particular concern are threats to mission critical systems such laboratory networks for R&D, drug production networks with new automation and industrial control systems (ICS), and medical device configuration and management systems. These environments--often built on legacy platforms with minimal security controls--can be difficult and costly to modernize. Hospital networks and data access are also strained by the growing number of real-time and wireless interconnections with patient care providers and medical device management systems.

Anchor Element

Copy for linking on the same page:

https://www.peratonlabs.com?data-scroll-to-anchor=services

Copy for linking from an external page:

https://www.peratonlabs.com?data-anchor-link=services

Service offerings

Our customizable, 360-degree security service suite delivers a complete solution to help develop, assess and maintain an effective risk management program and security controls to meet the changing needs of the life sciences sector.

Services and solutions that help assess and reinforce the security posture of:

Wireless remote workforce and wireless medical treatment environment
Web applications used by physicians, patients and medical insurance companies
Research and clinical infrastructure of pharmaceutical companies

Medical diagnostic, imaging and vital signs monitoring systems
Patient implantable and wearable medical devices
Medical facility automation systems

Core security services encompassing:

People analysis: including security awareness and social engineering assessments--your employees are both potential vulnerabilities and security controls

Criticality analysis: including analyses of business impact, supply chain, disaster recovery and compliance—because missions evolve and priorities change unexpectedly
Threat analysis: with an adversary model developed to identify vulnerabilities and examine potential threats based on those weaknesses—because assessing adversary motivation, means and opportunity is needed to incorporate threat sources, events and scenarios, and intelligence
Risk management assessment: to rank the likelihood of negative incidents occurring, determine the possible range of consequences and identify countermeasures to reduce the severity of adverse impacts. This enables executives to understand the overall risks to the business and operations infrastructure and plan appropriate mitigations
Data infrastructure: including clinical data, patient personally identifiable information (PII) and trade secrets—whether resident or in the cloud
Operational networks and infrastructure: including technical security review of enterprise, IT, research, lab, clinical, patient care, medical device management, production networks, control systems and applications

Our 4-Quadrant™ state-of-the-art vulnerability assessment and penetration testing: identifying complex and interdependent vulnerabilities not evident in testing done as a snapshot in time or separately in each domain (i.e., network environment; software; wireless / radio; embedded systems / hardware / firmware).

Anchor Element

Copy for linking on the same page:

https://www.peratonlabs.com?data-scroll-to-anchor=approach

Copy for linking from an external page:

https://www.peratonlabs.com?data-anchor-link=approach

Our approach

We use a systematic approach with assessments across policies, processes and procedures to simulate a real-world attack on your networks, systems and data. This comprehensive approach looking across all four quadrants reveals weaknesses that are not evident when focusing one-by-one on infrastructure components.

Our innovative 4-Quadrant Assessment Methodology provides a holistic, integrated evaluation of:

Service and management applications software
Network infrastructure and access
Embedded hardware and firmware
Wireless communications—the quickly growing medium of choice for much of the life science sector

Anchor Element

Copy for linking on the same page:

https://www.peratonlabs.com?data-scroll-to-anchor=capabilities

Copy for linking from an external page:

https://www.peratonlabs.com?data-anchor-link=capabilities

Capabilities

INDUSTRIAL CONTROL SYSTEMS (ICS) AND INTERNET OF THINGS (IOT) SECURITY CAPABILITIES

Specifically for manufacturers of drugs and devices, our ICS and IoT security capabilities provide patented solutions and services that deliver intelligent analytics and automated defense to secure and protect ICS and IoT platforms. Our consulting services are led by certified experts with deep technical knowledge and extensive industry experience.

Learn more