Cybersecurity risk management

Across our company, our products, and our services, GE HealthCare is working nonstop to help protect your organization, your team, and your patients from today’s increasing cybersecurity threats.

GE HealthCare’s commitment to cybersecurity is embedded in everything we do.

Connected healthcare is driving improved efficiency and outcomes. But it also comes with rising cybersecurity risks. At GE HealthCare, we'll never stop working to help keep you protected. From the security designed and built into our products and services, to the 24/7/365 risk management provided by Skeye™, we help safeguard your devices, systems, and data, so you can seize every opportunity of connected care.

What's at stake

42%

Increase in global weekly cyberattacks in the first six months of 2022.¹

The top target of large breaches is hospitals, at 30% of all incidents.²

$10.1M

That's the cost per breach in healthcare, and the problem is getting worse.³

10x

Personal health info is worth at least 10 times more than financial info on the black market.³

Multifaceted approach

Discover how we confront the complex challenges of healthcare cybersecurity.

People

Combining advanced medical device knowhow with global cybersecurity expertise.

Processes

Consistent global frameworks to promote effective, efficient, secure products and services.

Regulatory & industry best practices

Adhering to stringent standards while collaborating with global regulators and industry groups.

Technology partners

Leveraging technology partnerships to advance our enterprise, products, and services for customers.

Cybersecurity leadership

Staying ahead of today’s dynamic cybersecurity threats

It takes vigilance, collaboration, and a multifaceted approach. Tap into the latest perspectives culled from GE HealthCare's medical device knowhow combined with global cybersecurity expertise.

Our four tenets

Our approach to healthcare cybersecurity

Explore what drives cybersecurity at GE HealthCare: secure products, secure services, secure enterprise, and cybersecurity managed and consulting services including Skeye.

Driving a secure enterprise

We protect our business because it’s essential to protecting yours. Through strong safeguards of our enterprise systems, we bring you greater supply chain confidence and support our mutual success.

Learn more

Driving a secure enterprise

Strong internal safeguards address:

Sensitive data: Antivirus, disk encryption, physical data center security, PII/PHI/IP detection, and multifactor authentication

Manufacturing, engineering, and OT cybersecurity: Strong posture across the supply chain

Identity and access management: Based on role, geography, and skill set

Enterprise disaster recovery

Ensuring secure products

From design and development, to maintenance throughout the product lifecycle, GE HealthCare takes a holistic approach to product cybersecurity to give you peace of mind.

Learn more

Ensuring secure products

Secure by design: Designing based on detailed risk assessments

Hardening: Only necessary software

Product Security Portal: Communicating vulnerabilities and distributing patches

Continuity™: Ongoing software and hardware updates

Delivering secure services

With innovative technology, processes, and risk mitigation approaches, we advance security and privacy throughout our services to simplify and support your own security efforts.

Learn more

Delivering secure services

ISO 27001 Information Security Management System
Safeguarding customer data, installations, services, and training Supporting continuous improvement of processes, tools, and controls Ensuring compliance with data protection regulations

InSite™
Enabling safe and secure remote monitoring, diagnosis, and response, as well as interactive application support

Providing managed and consulting cybersecurity services for comprehensive protection

We continuously help secure operations, systems and data via managed services including Skeye cybersecurity – a holistic, 24/7 solution for all your networked medical devices, regardless of manufacturer.

Learn more

Cybersecurity managed and consulting services

Managed services
Specialized cybersecurity care for medical devices, IoT, and clinical systems

Skeye: A holistic, 24/7/365 solution for all your networked medical devices, regardless of manufacturer

Consulting services
Clinical OT and PACS Ecosystem Cybersecurity Risk Assessments — Analyzing the risks to medical device ecosystems and imaging archiving systems, and providing recommended mitigation actions

Learn more