{"id":62774,"date":"2026-03-11T19:06:38","date_gmt":"2026-03-11T18:06:38","guid":{"rendered":"https:\/\/pharma-trend.com\/en\/himss-survey-60-of-health-systems-cant-protect-unmanaged-medical-devices\/"},"modified":"2026-03-11T19:06:38","modified_gmt":"2026-03-11T18:06:38","slug":"himss-survey-60-of-health-systems-cant-protect-unmanaged-medical-devices","status":"publish","type":"post","link":"https:\/\/pharma-trend.com\/en\/himss-survey-60-of-health-systems-cant-protect-unmanaged-medical-devices\/","title":{"rendered":"HIMSS Survey: 60% of Health Systems Can’t Protect Unmanaged Medical Devices"},"content":{"rendered":"
\n

\nLeaders rank avoiding clinical downtime as their top microsegmentation priority, yet 40% say fear of disruption blocks adoption<\/i><\/p>\n

SAN JOSE, Calif.–(BUSINESS WIRE)–#HIMSS2026<\/a>—Elisity<\/a>, the pioneer in identity-based microsegmentation, today announced the release of The Implementation Paradox: Healthcare Leaders Want Microsegmentation-Level Security Without Disruption<\/b><\/a>, a comprehensive report co-published with Healthcare Information and Management Systems Society (HIMSS) Market Insights. Sixty percent of respondents flagged an inability to protect unpatchable or agentless devices as a critical or significant limitation. Poor visibility into device inventory ranked second at 30%. Nearly half reported that their cyber insurance carriers demanded specific controls during renewal in the past two years, accelerating timelines across the board.<\/p>\n

<\/a>
<\/a><\/p>\n

\n“For two decades, healthcare did nothing about segmentation because legacy approaches demanded disruptions organizations couldn’t afford,” said James Winebrenner, CEO of Elisity. “Modern microsegmentation breaks that cycle: deploy in weeks on existing switches, cover every device, manage policies simply, zero downtime. A more modern approach is needed so that the industry can seamlessly secure their complex environments, prevent lateral movement attacks, and maintain patient care continuity while achieving HIPAA compliance and HHS 405(d) best practices.\u201d<\/p>\n

\nConnected medical and IoT devices have expanded the attack surface, resulting in new attack vectors that cybercriminals exploit to gain unauthorized access to critical patient care systems and protected health information (PHI). With thousands of devices spanning multiple facilities, many healthcare organizations are struggling to maintain visibility and control.\u200b<\/p>\n

\nElisity and HIMSS Market Insight\u2019s report takes a deep dive into the gaps or limitations in healthcare organizations\u2019 current IoMT or medical device security<\/a>, and protection strategies, as well as recent actions taken by cyber insurance carriers and the most important return on investment outcomes when considering microsegmentation implementations. Additionally, the report uncovers not only the key decision drivers for healthcare leaders when evaluating microsegmentation solutions, but also, the barriers to implementing microsegmentation strategies.<\/p>\n

\nOne of the report’s most critical findings is the gap in healthcare organizations’ ability to protect unpatchable or agentless devices. Sixty-two percent of respondents rated their inability to protect these devices as a critical or significant limitation, the highest of any category surveyed. Poor visibility of devices and asset inventory followed at 56%, then policy-management overhead (54%) and lack of continuous monitoring for lateral movement and segmentation failures (52%).<\/p>\n

\nAdditionally, concerns about workflow disruptions is the primary reason healthcare organizations do not deploy microsegmentation. In fact, 40% report these concerns as a barrier to implementation in their environments.<\/p>\n

\nKey findings include:<\/b><\/p>\n