Pharmaceutical firms, despite having more developed cybersecurity measures than other sectors within healthcare, must still navigate intricate risks. These risks stem from their broad attack surfaces, complex operations in manufacturing and distribution, and the protection of sensitive intellectual property. According to Joshua Mullen of Booz Allen Hamilton, the complexity of the pharmaceutical supply chain further compounds these challenges.
Mullen, the vice president and leader of Booz Allen Hamilton’s health and life sciences commercial business, highlighted the independent nature of the pharmaceutical supply chain in an interview with Information Security Media Group. He emphasized the vast attack surface these companies must defend, noting that while adversaries need only one successful breach, pharmaceutical companies must consistently prevent all potential threats.
Even minor disruptions in one part of the world can have rapid and widespread implications, affecting everyday Americans. This could impact access to medications and therapies, the verification of insurance at pharmacies, and even the pricing of medications. Such vulnerabilities underscore the reality of cyberattacks in the sector.
In an audio interview with Information Security Media Group, Mullen explored several cybersecurity concerns. These include challenges posed by the Internet of Things and operational technology devices, considerations for cybersecurity in the era of post-quantum computing, and strategies like zero trust, AI-enabled threat detection, and red-teaming to enhance security in the pharmaceutical industry.
With two decades of consulting experience, Mullen leads Booz Allen’s global commercial Health & Life Sciences and Commercial Financial Services divisions. His career has been dedicated to security and technology, focusing on business continuity, disaster recovery, and the adoption of emerging technologies. Before his current role, Mullen worked in Booz Allen’s federal and commercial sales teams and contributed as an analyst and facilitator in the firm’s capability delivery space.