跳到内容

Healthcare

医疗诊所 PDPL IT 加固

Mignet 如何为迪拜诊所分段网络、加密患者备份并映射阿联酋PDPL控制——且不中断门诊时间。

客户:
Multi-doctor clinic, Dubai
行业:
Healthcare
发布日期:
医疗诊所 PDPL IT 加固

项目概览

0

Clinic-hour outages during rollout

PDPL

Controls mapped & evidenced

24/7

Monitoring after go-live

概述

A growing Dubai clinic ran EMR, imaging and guest Wi-Fi on a flat network, with backups sitting on the same NAS as production. Leadership needed UAE PDPL-ready controls without taking rooms offline during clinic hours.

Mignet segmented clinical, guest and medical-device VLANs, moved backups to an immutable target, rolled out MFA and EDR, and produced a records-of-processing pack the clinic’s DPO could defend.

面临的挑战

  • Patient data on a flat LAN shared with guest Wi-Fi
  • Backups on the same NAS as the EMR
  • No MFA on clinical mailboxes
  • Change windows limited to evenings and Fridays
  • Need for PDPL evidence, not just tools

我们的方案

  1. 01

    Discovery without disruption

    • Mapped devices, EMR vendor and imaging flows after hours
    • Identified personal-data stores for the PDPL record
    • Agreed a phased VLAN cutover with a rollback
  2. 02

    Controls

    • Clinical / guest / device segmentation
    • Immutable backups with a restore test
    • MFA, EDR and email security
    • Admin logging retained for 12 months
  3. 03

    Evidence & handover

    • Access-review export for the DPO
    • Incident playbook and after-hours number
    • AMC covering 24/7 monitoring

交付成果

  • No clinic-hour outage during the cutover
  • Guest Wi-Fi can no longer reach EMR
  • Restore test completed inside the agreed RTO
  • PDPL technical measures documented for the next audit
They worked around our lists. Patients never noticed — and we finally have a pack we can show an auditor.
Practice manager, client clinic

常见问题

Will this work with our existing EMR?

Yes. We design around the vendor’s supported topology rather than forcing a rip-and-replace.

Is this a legal PDPL opinion?

No — we implement and evidence technical measures. Legal opinions stay with your counsel.

更多案例

案例研究

医疗诊所 PDPL IT 加固 | 案例研究