1 2 3 4 5 We want to hear from you! chime16.org/evals Select the session type Find the correct session Rate the session Cast your vote for Encore Sessions Add comments then click “Submit” chime16.org/evals 1 2 3 4 5 Evaluations also available on the CHIME16 mobile app Access track session slides at www.chime16.org

Security Threat Management A practical approach for healthcare organizations Chad Wilson, CISO - Children’s National Health System Adam Sears, Director - The Bear Institute at Children’s National Health System

Agenda Recent health IT security climate changes Impact of cyber threats to care delivery Understanding the threats Building a wellness plan

In the news 2009 to Jan 2016: 1,440 Organizational Reports Healthcare: 21% of total breach incidents, 34% of total records

In the news

In the news

Organizational impacts Data loss Reputational damage Interruption of continuity of care delivery Loss of patient trust Scheduling/Services impact Regulatory fines Negative financial impact

What are the threats? Malware Social Engineering Network Mobile Internet of Things

How does it work? Your Outlook Web Access Password Expires in 2 hour(s) You are to change your Password below via the ACCOUNT MANAGEMENT PAGE. Click on CHANGE PASSWORD If Password is not change in the next 2 hour(s) Your next log-in Access will be declined. If you do find any difficulties to Change Password, quotas, accessing files or missing files please contact the ITS Helpdesk. Regards, IT Services.

Threat Management Understand the business Know the attackers methods Care delivery Wellness Community Outreach Know the attackers methods Identify the impact of methods on the business – know high risk areas Model the threat vectors

Threat Management

Cyber Wellness Plan Stay vigilant Tenants to build an effective wellness plan, with a focus on prevention: Strategic focus Patient care is the No. 1 priority in a hospital Protecting care delivery and the IT health of the organization is a strategic imperative Collaborate with leaders and care providers Everyone uses IT Collaborate to identify positive outcomes Understand your systems Identify risk & vulnerabilities Know the impact of successful attack to plan appropriate mitigations & investments Perform first aid on the organization Stay vigilant Cybersecurity’s “golden hour” is “22 seconds” Continuous monitoring of systems, as threats move at the speed of computers Interoperability across protection technologies Treat systems as a virtual team that needs to collaborate

Questions?

1 2 3 4 5 We want to hear from you! chime16.org/evals Select the session type Find the correct session Rate the session Cast your vote for Encore Sessions Add comments then click “Submit” chime16.org/evals 1 2 3 4 5 Evaluations also available on the CHIME16 mobile app Access track session slides at www.chime16.org