HOSPITALS DON’T HAVE FUNDS TO MEET NEW COSTLY CYBER SECURITY REQUIREMENTS

Catholic not-for-profit hospitals do not have the funds to meet the government’s costly new cyber security requirements.
Based on government data it will cost the larger hospitals in Catholic Health Australia’s 75-strong network some $120 million over the next four years to meet the requirements laid out in the new Critical Infrastructure Protection Bill.
The Bill is designed to ensure the nation’s ‘critical infrastructure’ – which includes hospitals – can defend itself against cyber attacks.
CHA chief executive Pat Garcia said that while Catholic not-for-profit hospitals were supportive of the need to prepare their facilities for potential cyber attack, they could not do so quickly with existing funding.
“Our not-for-profit hospitals are always running tight budgets. But recently they have battled disruptions to elective surgery, the cost of PPE and test kits, and the need to plug COVID-enforced workforce gaps. So right now most hospitals are stretched tighter than ever,” Mr Garcia said.
“In fact, the larger hospitals in the Catholic sector help subsidise smaller regional hospitals that are critical to our regional communities.
“We support the Government’s aims to protect critical infrastructure, but if our hospitals absorb the $120 million in costs then it will have devastating consequences.
“If we are forced to implement these complex and costly changes in the short time frame required by this legislation it will force many of our hospitals to drastically review their services, particularly in regional areas.
“As things stand our members will have to choose between becoming cyber secure or looking after Australians who need care. That’s not a choice they should be forced to make.”
“Each year our sector delivers some $66 million in services to the community through more than 100 social outreach programs. Our mission is to look after society’s most vulnerable, but we can only do that if we can balance our budget.”