Home / Current Issue / Paper 1708312
Multi-Cloud Security Challenges in Healthcare: Designing A Unified Cyber Risk Management Strategy
Subject area: Science,Engineering and Technology · Area of research: Security Risk Management and Compliance
Abstract
Multi-cloud computing is gradually being adopted by the healthcare industry to be more agile, lower operational costs, and take advantage of specialized services offered by clouds. However, with this digital transformation come heavy security challenges, more so in terms of managing sensitive patient data across different cloud environments. Complexity is introduced into multi-cloud architectures, such as the prospect for inconsistent security policies, attacker perimeters, and significant hurdles to making their regulatory obligations. Healthcare data is highly coveted among cybercriminals, and the stakes for their confidentiality, integrity, and availability couldn't be higher. Organizations carrying out operations with several cloud service providers (CSPs) are also faced with these critical challenges: sovereignty of data, inconsistencies in identity and access management (IAM), misconfigurations, and third-party risks. Traditional security paradigms have, more often than not, failed to present an integrated approach to such challenges, therefore leaving gaps in their protection and visibility. The paper discusses the unique cybersecurity challenges of healthcare multi-cloud adoption and accentuates the need for an integrated approach to cyber risk management. Such a strategy should entail centralized governance coupled with dynamic risk assessment and automation of compliance controls. Establishments of need include Cloud Security Posture Management (CSPM), a unified IAM model grounded on Zero Trust principles, robust encryption practices, and coordinated incident response planning. Moreover, the compliance must harbor with the changes in healthcare regulations like HIPAA, GDPR, and HITECH. This holistic cyber risk management will provide a better facility to healthcare organizations to protect electronic protected health information (ePHI), build trust with patients and assure operational resilience. The future for healthcare cloud security is in frameworks that are unified, proactive, scalable, and adaptable to a landscape of everchanging threats.
Keywords
Multi-cloud computing, healthcare cybersecurity, unified risk management, Cloud Security Posture Management (CSPM), Identity and Access Management (IAM), Zero Trust Architecture, data sovereignty, regulatory compliance (HIPAA, GDPR, HITECH), electronic protected health information (ePHI), incident response, cloud misconfiguration, cyber risk strategy.
References
[1] Pawar, H. & Saiyed, M. (2025). Evaluating the effectiveness of remote project management in the post-pandemic era. Laurea University of Applied Sciences.
[2] Jobstreet by SEEK. (2024). Employee Job Happiness Index 2024: Filipino workers excel in remote jobs, yet married couples report higher happiness levels. Manila Bulletin.
[3] Katari, K., Colon, G., & Patel, A. (2021). Challenges of remote project management: An analytical review of communication and team dynamics. Journal of Project Management Studies, 18(3), 245-263.
[4] Fobiri, G., Singh, A., & Montgomery, R. (2022). Quality assurance in distributed project teams: Maintaining consistent standards in remote environments. International Journal of Project Management, 40(2), 112-128.
[5] Ajgaonkar, H., Torres, L., & Feng, J. (2022). Remote work and project agility: Global talent acquisition strategies for enhanced project outcomes. Project Management Journal, 53(1), 77-89.
[6] Reiff, J., & Schlegel, T. (2022). Digital enablers for remote project management: Evaluating tool effectiveness in hybrid work models. IEEE Transactions on Engineering Management, 69(4), 1325-1337.
[7] Atlassian Community. (2020). Remote team management: Lessons from Trello's hybrid work model. Atlassian Community Resources.
[8] Cruz, M. L., & Santos, F. R. (2023). Remote project management adoption in the Philippines: Challenges and opportunities for developing economies. Asian Business & Management Journal, 12(2), 167-182.
[9] Garcia, A. J., & Mendoza, T. P. (2024). Digital transformation in Pampanga: The evolving business landscape of Central Luzon. Philippine Management Review, 31(1), 45-62.
[10] Villanueva, R. T., Lopez, S. M., & Castro, D. R. (2023). Work-life balance in remote project teams: Comparative analysis of Filipino work-from-home experiences. Southeast Asian Journal of Management, 17(3), 312-329.
[11] Morgan, S.E., Ahn, S., Mosser, A., Harrison, T.R., Wang, J., Huang, Q., ..., Bixby, J. 2021.The effect of team communication behaviors and processes on interdisciplinary teams'research productivity and team satisfaction. Informing Science, 24.
[12] P. Kanawattanachai and Y. Yoo, "The impact of knowledge coordination on virtual team performance over time," Mis Quarterly, pp. 783-808, 2007 2007.
[13] https://psico-smart.com/en/blogs/blog-remote-work-and-its-influence-on-productivity-management-strategies-168471
[14] Miljus R.C., Lawler E.E., Weick K.E. Review of Managerial Behavior, Performance, and Effectiveness, by J. P. Campbell & M. D. Dunnette. Ind. Labor Relat. Rev. 1971;24:487–488. [Google Scholar]
[15] Assessment of Facility Management Performance: A Basis for Digitalizing Reporting Systems in Educational Institutions. https://ieeexplore.ieee.org/abstract/document/9400097
How to cite this paper
@article{1708312,
author = {Eniola Akinola Odedina},
title = {Multi-Cloud Security Challenges in Healthcare: Designing A Unified Cyber Risk Management Strategy},
journal = {Iconic Research And Engineering Journals},
year = {2024},
volume = {8},
number = {2},
pages = {1078-1090},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1708312.pdf},
abstract = {Multi-cloud computing is gradually being adopted by the healthcare industry to be more agile, lower operational costs, and take advantage of specialized services offered by clouds. However, with this digital transformation come heavy security challenges, more so in terms of managing sensitive patient data across different cloud environments. Complexity is introduced into multi-cloud architectures, such as the prospect for inconsistent security policies, attacker perimeters, and significant hurdles to making their regulatory obligations. Healthcare data is highly coveted among cybercriminals, and the stakes for their confidentiality, integrity, and availability couldn't be higher. Organizations carrying out operations with several cloud service providers (CSPs) are also faced with these critical challenges: sovereignty of data, inconsistencies in identity and access management (IAM), misconfigurations, and third-party risks. Traditional security paradigms have, more often than not, failed to present an integrated approach to such challenges, therefore leaving gaps in their protection and visibility. The paper discusses the unique cybersecurity challenges of healthcare multi-cloud adoption and accentuates the need for an integrated approach to cyber risk management. Such a strategy should entail centralized governance coupled with dynamic risk assessment and automation of compliance controls. Establishments of need include Cloud Security Posture Management (CSPM), a unified IAM model grounded on Zero Trust principles, robust encryption practices, and coordinated incident response planning. Moreover, the compliance must harbor with the changes in healthcare regulations like HIPAA, GDPR, and HITECH. This holistic cyber risk management will provide a better facility to healthcare organizations to protect electronic protected health information (ePHI), build trust with patients and assure operational resilience. The future for healthcare cloud security is in frameworks that are unified, proactive, scalable, and adaptable to a landscape of everchanging threats.},
keywords = {Multi-cloud computing, healthcare cybersecurity, unified risk management, Cloud Security Posture Management (CSPM), Identity and Access Management (IAM), Zero Trust Architecture, data sovereignty, regulatory compliance (HIPAA, GDPR, HITECH), electronic protected health information (ePHI), incident response, cloud misconfiguration, cyber risk strategy.},
month = {August},
}