The spectrum of technologies supporting health care is staggering, and medical devices are a large part of the complex ecosystem delivering patient care. The things medical devices enable caregivers to do is genuinely awe-inspiring. This diversity of technology is also more connected than ever before. Healthcare is an information business, and medical device technology generates much of the data supporting patient care. The burden of ensuring this technology remains safe to use, protects patient data, and is available when needed, falls squarely on the shoulders of HTM staff. As bad actors crank up attacks on healthcare, HTM staff increasingly take on cybersecurity responsibility. This extra duty may seem daunting, but HTM staff are more prepared than they realize. This session will discuss the challenges of securing medical devices and what HTM staff can do to reduce the threat surface, limit the blast radius, and improve the efficiency and effectiveness of response and recovery activities for their organization.

Intermountain Health has been on a multi-year journey to mature its medical device cybersecurity program. We still have a long way to go but we would like to share with you where we are today and what we did to get here. In this session I’ll show you how Intermountain Cybersecurity conducts risk assessments for medical devices, analyzes controls, and ultimately generates a technical implementation guide used by the boots-on-the-ground (i.e., all y’all in the audience!). Lively discussion and interaction is encouraged​​.