Ordr to Highlight Healthcare Asset Intelligence Best Practices at HIMSS 2024

●Speakers:

Keith Whitby, Division Chair, HTM, Mayo Clinic

Keith Duemling, Senior Director, Cybersecurity Technology Protection, Cleveland Clinic

Jim Hyman, CEO, Ordr

● When: 

Wednesday, March 13, 2024, from 2:30 - 3:30 pm EST

● Where:

Room W304E, Orange County Convention Center

● About:

The explosion of connected healthcare assets, along with the rise of cyberattacks, have highlighted the need for healthcare systems to take control of what's on their network. These assets—ranging from medical devices for patient care to Internet of Things/Operational Technology (IoT and OT) devices such as HVAC and elevator control systems for hospital operations—increase the attack surface. The stakes—patient safety—are significant. But what does a successful medical and healthcare device cybersecurity program look like? Where do you start? Who owns the program? What is the process to gain complete inventory and security of every connected device in the hospital?

This panel will offer perspectives from two unique stakeholders in the healthcare organization—HTM and cybersecurity—who will share lessons from the trenches of their connected asset security journey. The session will share best practices across people, process and technology for building a successful medical and healthcare device security program. It will focus on the importance of enabling collaboration between HTM and cybersecurity teams, and also explore the approach to expand cybersecurity beyond visibility and security of medical devices for a "whole hospital" approach.

●Speakers:

Larry Smith, Manager, Cybersecurity Architecture and Engineering, El Camino Health

Ben Stock, Director of Healthcare Product Development, Ordr

● When:

Thursday, March 14, 2024 from 4:00 - 5:00 pm EST

● Where:

Room W304E, Orange County Convention Center

● About:

A Zero Trust security approach shifts security teams from a castle and moat security model to one where users, devices, workloads and systems are "untrusted" and considered a potential threat vector. Zero Trust as a strategy and an architectural approach is being embraced by many organizations, including those in healthcare. But many healthcare organizations struggle with where to start.

Zero Trust is a great approach to apply to connected assets in healthcare. Because the medical and IoT devices used in healthcare act in a deterministic manner, they behave the same way every time. An infusion pump or MRI behaves in a certain way, because of its function. By baselining normal behavior for a device, you can implement segmentation policies to allow it to behave the way it is supposed to, while blocking everything else.

In this session, learn how to simplify your Zero Trust journey in healthcare, starting with discovering and classifying assets in the network, baselining device communications, and defining the appropriate policies. Explore Zero Trust use cases for connected devices, such as segmenting devices with outdated operating systems, delivering cost avoidance and security benefits.

●Speaker:

Wes Wright, Chief Healthcare Officer, Ordr

●When:

Tuesday March 12, 2024, from 11:15 - 11:35 am EST

●Where:

Cybersecurity Command Center, Theater B, Hall A, Booth #1601, OrangeCounty Convention Center

●About:

You can't protect what you can't see. Asset visibility and context can help teams optimize patching efforts, address compliance, and accelerate incident response. But it is a struggle for many organizations. Why? Wes Wright, Ordr Chief Healthcare Officer, will discuss considerations for "whole hospital" asset visibility and security.