К содержанию

Healthcare

Укрепление IT клиники под PDPL

Как Mignet сегментировала сеть клиники в Дубае, зашифровала бэкапы пациентов и закрыла контроли PDPL без простоя приёма.

Клиент:
Multi-doctor clinic, Dubai
Отрасль:
Healthcare
Опубликовано:
Укрепление IT клиники под PDPL

Кратко о проекте

0

Clinic-hour outages during rollout

PDPL

Controls mapped & evidenced

24/7

Monitoring after go-live

Обзор

A growing Dubai clinic ran EMR, imaging and guest Wi-Fi on a flat network, with backups sitting on the same NAS as production. Leadership needed UAE PDPL-ready controls without taking rooms offline during clinic hours.

Mignet segmented clinical, guest and medical-device VLANs, moved backups to an immutable target, rolled out MFA and EDR, and produced a records-of-processing pack the clinic’s DPO could defend.

Задача

  • Patient data on a flat LAN shared with guest Wi-Fi
  • Backups on the same NAS as the EMR
  • No MFA on clinical mailboxes
  • Change windows limited to evenings and Fridays
  • Need for PDPL evidence, not just tools

Наш подход

  1. 01

    Discovery without disruption

    • Mapped devices, EMR vendor and imaging flows after hours
    • Identified personal-data stores for the PDPL record
    • Agreed a phased VLAN cutover with a rollback
  2. 02

    Controls

    • Clinical / guest / device segmentation
    • Immutable backups with a restore test
    • MFA, EDR and email security
    • Admin logging retained for 12 months
  3. 03

    Evidence & handover

    • Access-review export for the DPO
    • Incident playbook and after-hours number
    • AMC covering 24/7 monitoring

Результаты

  • No clinic-hour outage during the cutover
  • Guest Wi-Fi can no longer reach EMR
  • Restore test completed inside the agreed RTO
  • PDPL technical measures documented for the next audit
They worked around our lists. Patients never noticed — and we finally have a pack we can show an auditor.
Practice manager, client clinic

Частые вопросы

Will this work with our existing EMR?

Yes. We design around the vendor’s supported topology rather than forcing a rip-and-replace.

Is this a legal PDPL opinion?

No — we implement and evidence technical measures. Legal opinions stay with your counsel.

Другие кейсы

Кейсы

Укрепление IT клиники под PDPL | кейс