Back to Case Studies
MedicineOne
Healthcare

MSSP - Securing Healthcare Data in the Cloud

AWSSecurityMSSPHealthcare
  • MedicineOne MSSP English - magic beans Skip to content About Us
  • What we do Migration GEN AI / LLM
  • Applications Modernization
  • Managed Services
  • FinOps
  • Salesforce
  • Projects
  • Partnerships AWS Amazon Connect
  • AWS Immersion Day
  • Cloud Adoption
  • AWS FinOps
  • AWS Managed Databases
  • AWS Managed Services
  • AWS Migrations (MAP)
  • MSSP
  • Public Sector Solutions
  • Security Assessment
  • AWS Training Academy
  • SaaS – AWS
  • Serverless Applications
  • Storage Solutions
  • Well-Architected Review
  • Windows on AWS
  • Google Cloud Platform GCP FinOps
  • GCP Managed Services
  • GCP Modern Apps
  • GCP Serverless Applications
  • GCP Storage Solutions
  • Microsoft Azure Azure Backup Solutions
  • Azure FinOps
  • Azure Managed Database
  • Azure Managed Services
  • Azure Migration Service
  • Azure Modern Apps
  • Azure Security Assessment
  • Azure Site Recovery
  • Azure Training Academy
  • Azure Well-Architected Framework Review
  • Red Hat
  • Veeam
  • Zendesk
  • Careers
  • Contact Us
  • Insights Learning Hub
  • Blog Posts
  • News
  • Customer Area
  • MedicineOne MSSP EnglishRui Ribeiro2025-07-02T15:53:40+00:00

    MSSP - Managed Security Service Provider

    About MedicineOne

    MedicineOne develops innovative software solutions for hospitals, clinics, and healthcare providers. With deployments spanning four continents, the company delivers both on-premises and cloud-based platforms that improve patient safety, streamline operations, and empower medical professionals with real-time insights. As the healthcare industry increasingly moves toward digital transformation, secure and compliant cloud infrastructure is essential for MedicineOne’s success.

    https://www.medicineone.net/empresa

    Executive Summary

    MedicineOne, a leading Portuguese health-tech company, provides advanced clinical management software to healthcare facilities worldwide. With sensitive patient data and critical decision-support systems hosted in the cloud, security and compliance are top priorities. To enhance its security posture, MedicineOne partnered with Magic Beans to implement a robust AWS security framework. By deploying AWS Security Hub, GuardDuty, Inspector, KMS, and CloudTrail, MedicineOne achieved a higher level of threat detection, compliance management, and data protection—ensuring the integrity and confidentiality of its cloud-based healthcare solutions.

    Customer Challenge

    As MedicineOne operates in a highly regulated environment where data privacy, security, and compliance are non-negotiable. The company faced several key challenges:

  • Strict compliance requirements: Adhering to global healthcare regulations (GDPR, HIPAA) while expanding cloud-based services.
  • Protection of sensitive patient data: Ensuring encrypted storage and secure transmission of medical records.
  • Real-time threat detection and mitigation: Identifying and responding to potential cyber threats before they compromise patient information.
  • Securing cloud-hosted applications: Protecting web-based healthcare solutions from external threats like SQL injection, bot attacks, and DDoS.
  • Auditable security practices: Maintaining detailed security logs to track user activities and system changes.
  • A breach or compliance failure could result in severe financial and reputational damage, legal consequences, and compromised patient safety.

    Partner Solution

    To address MedicineOne’s security challenges, Magic Beans implemented a multi-layered security approach leveraging AWS services:

  • AWS Security Hub: Provided a unified security dashboard, aggregating alerts and compliance findings across AWS accounts.
  • Amazon GuardDuty: Monitored for potential threats, including anomalous API calls and unauthorized access attempts.
  • AWS Inspector: Automated vulnerability scanning to detect misconfigurations and security gaps in MedicineOne’s cloud environment.
  • AWS Key Management Service (KMS): Enforced strong encryption policies to protect sensitive patient data.
  • AWS CloudTrail: Enabled detailed logging and auditing of system activities, supporting compliance efforts.
  • Managed Security Services Delivered

    Magic Beans provides MedicineOne with protection and operational oversight through its Managed Security Services model:

  • Threat Detection: Analysis of GuardDuty and Inspector findings.
  • Remediation: Isolate suspicious EC2 instances or revoke IAM sessions.
  • Patch & Configuration Management: Vulnerability scan results are validated.
  • Compliance Automation: Security Hub and CloudTrail logs support ISO 27001, HIPAA, and GDPR controls with reports.
  •  

    Security Governance & Collaboration

    Magic Beans implemented a governance framework tailored to healthcare compliance and operational needs:

  • Security Reports: Cover posture, open findings, compliance drift, encryption usage, and IAM policy anomalies.
  • Strategy Reviews: Align technical efforts with risk assessments and evolving regulatory obligations.
  • Controlled Change Management: All changes to infrastructure, rules, and security group policies undergo formal review.
  • Shared Risk Register: Open issues and audit findings are tracked collaboratively with MedicineOne’s IT team.
  •  

    Architectural Design

    Results and Benefits

    As a result of the Magic Beans Managed Security Services, MedicineOne is able to make significant improvements in security and operational efficiency:

  • Strengthened compliance posture: Automated security monitoring ensured continuous adherence to GDPR, HIPAA, and other healthcare regulations.
  • Enhanced data protection: AWS KMS encrypted all patient and operational data, reducing the risk of unauthorized access.
  • Faster threat detection and response: GuardDuty and Security Hub reduced mean-time-to-detection (MTTD), enabling quick incident mitigation.
  • Greater operational efficiency: Security automation reduced manual security tasks, allowing IT teams to focus on innovation.
  • Outcomes & Metrics

    MetricOutcomeMean Time to Detect (MTTD)Reduced to 3 minutes across cloud services via GuardDuty and Security Hub monitoringMean Time to Respond (MTTR)Achieved 12 minutes for critical incidents involving sensitive dataHIPAA & GDPR ComplianceReached 90% control coverage within 60 days of implementationPatch SLA ComplianceMaintained 96% on-time remediation of high and critical vulnerabilitiesAudit Readiness TimeReduced by 60% due to automated Security Hub and compliance reports

    View the original case study on our legacy websiteVisit

    Interested in similar results?

    Speak with our cloud architects about your project.

    Contact Us