Why MFA?
Information Security is a major concern for all businesses, especially those in healthcare. The information we process is extremely personal and used to provide services to improve patients’ lives. This information is also extremely valuable due to those personal details, which provide opportunities for fraud and abuse. This is why Kno2 has always had Multi-factor Authentication (MFA) as a no-cost optional feature.
Our purpose is to provide you more connectivity, while improving your workflows and improving patient care. The Kno2 network is expanding as we add significant value to each of our users with our status as a QHIN. Please see additional references below around new and added security requirements and why they are critical for all of us.
A note from our Security Team
Please share with anyone in your company who has questions regarding why MFA is being implemented. We thank you for supporting this requirement, as the security of PHI is of utmost importance to all of us.
The statistics are staggering. Microsoft reported in 2019 that 81% of their customer breaches were caused by credential theft. Seventy-three percent of the passwords used by customers for access to their company resources were also used on other sites. Microsoft summarized in the report that the use of Multifactor Authentication (MFA) would reduce the number of breaches by 99%. Federal agencies like the Cybersecurity & Infrastructure Security Agency (CISA) have also added their weight behind the recommendation to adopt MFA unilaterally to prevent breaches.
Multifactor Authentication Definition
MFA is defined as a login that includes two of the following characteristics:
Something you know: usually a password
Something you have: a text message, hardware key, or Mobile App
Something you are: biometrics, including facial recognition and fingerprint scanners
Multifactor Authentication stops breaches as an attacker cannot gain access to an account, even if they have the username and password.
Other References
The following sources provide additional detail about healthcare information, security requirements we adhere to, and our QHIN designation: