Privileged Access Management (PAM): comparison between the health and business sectors

Abstract

Introduction: Cyberattacks are targeted at healthcare organizations, focusing on personal and private data stored on the basis of sensitive information such as patient clinical data. Companies use privileged access management solutions because they find it more efficient to purchase and manage their own privileged account security solution. Objective: To review the use of privileged access management in the healthcare and business sectors. Methods: Elaboration of a bibliographic review through the collection of scientific articles with the application of inclusion and exclusion criteria, followed by the analysis, selection and creation of flowcharts. A comparison was made of the application of privileged access management in the healthcare and business sectors, with the respective context of a case study in the context of an internship at Sonae MC, BIT. Results: Proposal of a Prove of Concept (POC) for a healthcare case study and creation of a good practice guide for the possible implementation of a healthcare case study based on the work carried out. Conclusion: The healthcare industry processes and stores confidential information. This information can lead to identity theft and data breaches, and implementing a set of security measures can dramatically improve an organization's security posture, particularly in the healthcare industry.