Published: September 2025
Medically reviewed by:
Rebecca Rosenberger, Director of Medical Affairs
On December 5, 2019, a ransomware attack detected on Bio-Rad’s network forced the company to take certain systems off-line to contain the malicious activity.1 It was not the first attack. The WannaCry ransomware cryptoworm cyberattack in May 2017 targeted computers running Microsoft Windows operating system, and, in particular, hundreds of thousands of computers belonging to organizations that had not applied the patches provided by Microsoft prior to the attack.2
Is air gapping your solution? Have you asked yourself what your vendors do for your lab to protect your business?
Do you know if your business partners are cybersecurity champions or liabilities?
What makes healthcare organizations vulnerable to cyberattacks:
- Sensitive data: Healthcare organizations store vast amounts of personal and medical data, including protected health information (PHI), financial information and personally identifiable information (PII). This can make them targets for attackers seeking valuable information for ransom.
- Complex networks: The extensive and interconnected networks in healthcare facilities contain lab information and connected automation modules for productivity, which can increase the surface for potential attacks.
- Insufficient security measures: Budget constraints and other priorities sometimes result in inadequate investment in cybersecurity and overall security. This increases vulnerability.
- High demand for availability: Systems need to be constantly available for testing, narrowing the window of opportunity for security updates and patches.
- Human error: Employees may fall victim to phishing attacks or other social engineering tactics, rendering their organizations susceptible to functional, financial and reputational damage.
You have probably discussed with your IT partner which routines they have, how they perform risk management, how often they deploy patches and which threat intelligence sources they use.
What else can your laboratory do to minimize your lab’s risk exposure?
Firewalls, network segmentation and fire-fighting cyberthreats are no substitute for taking a systematic approach to information security management.
With Thermo Fisher Scientific by your side, you get a business partner who prioritizes secure workflow efficiency solutions with reliable instruments and world-class service support. This allows your lab to:
- Offer accurate allergy and autoimmune diagnostic test results
- Scale your operations
- Drive profitability and competitiveness
Information security management systems (ISMS) standards
Thermo Fisher has achieved ISO/IEC 27001:2022 certification, a globally recognized standard for ISMS. Here, we refer specifically to the ISMS supporting the Phadia™ Laboratory Systems including software applications (Phadia™ LabCommunity, Quality Club™) related log file management, instruments and services.3 This certification demonstrates our commitment to:
- Systematically manage sensitive information
- Implement comprehensive policies, procedures and controls
- Manage and mitigate information security risks
Our dedication to information security is proven through this rigorous ISO/IEC 27001:2022 certification process.
Benefits from choosing to work with an ISO/IEC 27001: 2022 certified business partner:
Comprehensive risk management
- ISO/IEC 27001:2022 provides a structured approach to identifying, assessing and mitigating information security risks.
- It provides a holistic approach and encompasses people, policies and technology, supporting defence against threats.
Commitment to security
- Certification requires ongoing investment in security measures, reflecting long-term commitment to cybersecurity.
- It ensures high standards of cyber resilience and operational efficiency.
Reduction in cyber-attack vulnerability
- As an ISO/IEC 27001:2022 certified organization, we implement rigorous security protocols.
- Accredited bodies ensure compliance with high international standards, providing assurance of robust security practices.
Support for data integrity, confidentiality and availability
- Established processes focus on data integrity, confidentiality and accessibility.
- The Phadia™ Laboratory Systems privacy and security guide includes measures for authenticity and non-repudiation, ensuring authorized access and compliance.
Operational excellence with global recognition
- Independent certification shows full investment in secure information management.
- It ensures constant vigilance.
- It repares the organization to face technology-based risks through continuous improvement.
Cost savings
- ISO/IEC 27001:2022 reduces expenses on ineffective defense technologies by increasing operational efficiency.
- It identifies and addresses weaknesses proactively, reducing the risk of unauthorized access, financial losses and reputational damage.
Check today if all your vendors and suppliers are ISO/IEC 27001:2022 certified and actively supporting your lab’s cybersecurity preparedness.
Ready to learn more about our solutions?
