1. 1 2 3 4 5 We want to hear from you! chime16.org/evals
Select the session type
Find the correct session
Rate the session
Cast your vote for Encore Sessions
Add comments then click “Submit”
chime16.org/evals 1 2 3 4 5
Evaluations also available on the CHIME16 mobile app
Access track session slides at

2. Security Threat Management
A practical approach for healthcare organizations
Chad Wilson, CISO - Children’s National Health System
Adam Sears, Director - The Bear Institute at Children’s National Health System

3. Agenda Recent health IT security climate changes
Impact of cyber threats to care delivery
Understanding the threats
Building a wellness plan

4. In the news 2009 to Jan 2016: 1,440 Organizational Reports
Healthcare: 21% of total breach incidents, 34% of total records

5. In the news

6. In the news

7. Organizational impacts
Data loss
Reputational damage
Interruption of continuity of care delivery
Loss of patient trust
Scheduling/Services impact
Regulatory fines
Negative financial impact

8. What are the threats? Malware Social Engineering Network Mobile
Internet of Things

9. How does it work?
Your Outlook Web Access Password Expires in 2 hour(s) You are to change your Password below via the ACCOUNT MANAGEMENT PAGE.
Click on CHANGE PASSWORD
If Password is not change in the next 2 hour(s) Your next log-in Access will be declined.
If you do find any difficulties to Change Password, quotas, accessing files or missing files please contact the ITS Helpdesk.
Regards, IT Services.

10. Threat Management Understand the business Know the attackers methods
Care delivery
Wellness
Community Outreach
Know the attackers methods
Identify the impact of methods on the business – know high risk areas
Model the threat vectors

11. Threat Management

12. Cyber Wellness Plan Stay vigilant
Tenants to build an effective wellness plan, with a focus on prevention:
Strategic focus
Patient care is the No. 1 priority in a hospital
Protecting care delivery and the IT health of the organization is a strategic imperative
Collaborate with leaders and care providers
Everyone uses IT
Collaborate to identify positive outcomes
Understand your systems
Identify risk & vulnerabilities
Know the impact of successful attack to plan appropriate mitigations & investments
Perform first aid on the organization
Stay vigilant
Cybersecurity’s “golden hour” is “22 seconds”
Continuous monitoring of systems, as threats move at the speed of computers
Interoperability across protection technologies
Treat systems as a virtual team that needs to collaborate

13. Questions?

14. 1 2 3 4 5 We want to hear from you! chime16.org/evals
Select the session type
Find the correct session
Rate the session
Cast your vote for Encore Sessions
Add comments then click “Submit”
chime16.org/evals 1 2 3 4 5
Evaluations also available on the CHIME16 mobile app
Access track session slides at