Industry
Technology and security for healthcare organizations
In healthcare, system availability is a patient safety matter and the data is among the most sensitive there is. Onion Infosec builds, secures and operates clinical and administrative technology with both facts in mind.
- Sector
- Healthcare
- Segments
- Hospitals and provider networks, Diagnostics and laboratories, Digital health and telemedicine, Medical device makers
01Context
In healthcare, availability is a safety property.
When ransomware stops clinical systems, care is delayed. Patient records combine identity, financial and medical detail, which makes them valuable to criminals and damaging to lose.
Clinical networks carry imaging, monitoring and laboratory equipment that cannot be patched like laptops and is often controlled by the vendor. Records systems, labs, pharmacies, insurers and telehealth platforms exchange data constantly, so one weak integration affects many parties.
02Technology
What the sector builds and runs.
- Clinical and patient applications
- Patient portals, telehealth, scheduling and integrations with records systems over HL7 and FHIR, built with consent, access logging and data minimization.
- AI in clinical and administrative work
- Documentation support, coding, triage assistance and document processing, designed with clinician review, privacy controls and evaluation against defined test sets.
- Infrastructure and IT operations
- Identity for shift-based staff, endpoint management, network segmentation for clinical devices, tested backup and recovery, and 24×7 support.
- Cloud and data platforms
- Migration of records, imaging archives and analytics to cloud, with de-identification for research use and residency controls for regulated data.
03Risk
The risks that matter most.
- Ransomware that disrupts care delivery
- Extortion that relies on the fact that clinical downtime delays treatment, which puts pressure on recovery decisions.
- Patient record theft
- Electronic health record systems and diagnostic archives targeted for personal and medical data that can be used for fraud.
- Unmanaged clinical devices
- Imaging, monitoring and lab equipment on flat networks, running vendor-controlled software that the hospital cannot patch.
- Integration and third-party exposure
- Interfaces to labs, insurers, billing services and telehealth providers that carry patient data outside the organization’s own controls.
04Regulation and assurance
What you may need to demonstrate.
HIPAA and HITECH set the rules for health information in the United States, and GDPR treats health data as a special category. ISO 27001, NIST CSF and HITRUST CSF are common control baselines. Device makers work to FDA premarket cybersecurity guidance and the EU MDR. National examples include the NHS Data Security and Protection Toolkit in the UK, and the DPDP Act and digital health standards in India.
Which of these apply depends on where you operate and what you do. We scope against your actual obligations.
05Where we usually start
Services that matter most here.
Managed SOC and MDR
24×7 monitoring across identity, endpoints and clinical networks, with escalation paths that respect clinical priorities.
Managed IT services
Endpoint, identity, network and backup operations for environments where downtime has clinical consequences.
Incident readiness
Ransomware playbooks, downtime procedures and recovery exercises prepared with clinical and IT leaders together.
Data security
Classification, encryption, access control and monitoring for patient data across records systems, archives and integrations.
AI
Clinical and administrative AI delivered with privacy controls, human review and evaluation that can be shown to a governance board.
Software and product development
Patient-facing applications and interoperability work built to healthcare data standards and secure development practice.