Upload File

hytrust heals healthcare...what keeps healthcare cisos up at night? 2% 6% 13% 15% 15% 19% 26% 29%...

  • Home
  • Documents
  • HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices
12
HyTrust Heals Healthcare Challenges and Solu<ons to Security and Compliance in the Healthcare Industry Eric Chiu, Founder and President

Upload: others

Post on 19-Jul-2020

0 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.1

HyTrustHealsHealthcareChallengesandSolu<onstoSecurityandComplianceintheHealthcareIndustry EricChiu,

FounderandPresident

Page 2: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.2

WhoisHyTrust?

HyTrustWorkloadSecuritysolu<onsmi<gatesthesecurityandopera<onalrisksthatorganiza<onsfacewhenpursuingcloudandvirtualiza<ondatacentertransforma<on

Foundedin2007

Extensivevirtualiza<onandcloudsecurityexper<se

12grantedandpendingpatents

AcquiredHighCloudSecurityin2013

Page 3: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.3

Andithurts!

$2.1M/databreach

HowBadisSecurityinHealthcare?Howmanybreached:91%ofHealthcareOrgssuffereddatabreachinpasttwoyears

Whodiscoveredthebreach:69%ofthe<meauditor30%ofthe<mepa<ent23%ofthe<me-accidentally

Breachesoccurbecause:70%oforgssayemployeenegligence26%oforgssaymaliciousinsiders

40% 39%

12%9%

38% 36%

16%

10%

45%

33%

16%

6%

46%

33%

17%

4%

29% 31%26%

14%

0%

10%

20%

30%

40%

50%

Figure25.Trendsindatabreachincidents

Yes,morethan5breaches

Yes,2to5breaches Yes,1breaches No

CE2015 FY2013 FY2012 FY2011 FY2010

Page 4: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.4

TrendsDrivingSecurityChangesforHealthcare

TechnologyShiOs

Keyregula<onsremainsame,butaddedcomplexityofcloudusage

Cloudalsointroducesmoresupplychainobliga<on(viaBusinessAssociates)

BuyingdecisionsforserverandnetworkcomputecanbemadesolelybyITnow(withouteverygrouphavingareview)

Rolesoverlap(SDDC/NSX)crea<ngprocessconfusion

Admininvirtualenvironmenthasmoreimpactwitheachac<on

ThreatLandscapeShiOs

Valueofhealthcarerecordsishighestforblackmarket($470/recordvs$1orlessforcreditcarddata)–leadingtomorefrequentaeemptsatbreaches(internalorexternal)

NoteblackmarketrateforEHRhasincreased10xinjust3years!

From2013to2014alonehealthcarerelatedcompaniessawa72%increaseincyberaeacks(internalorexternal)

Page 5: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.5

WhatKeepsHealthcareCISOsUpAtNight?

2%

6%

13%

15%

15%

19%

26%

29%

32%

33%

40%

70%

0% 10% 20% 30% 40% 50% 60% 70% 80%

Other

Insecuremedicaldevices

Insecuremobileapps(eHealth)

Systemfailures

Processfailures

Iden<tythieves

Maliciousinsiders

Employee-ownedmobiledevicesorBYOD

Mobiledeviceinsecurity

Useofpubliccloudservices

Cyberaeackers

Employeenegligence

MarkeditemsshowareasHyTrustcan

addressimmediately!

Page 6: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.6

HowDoesHyTrustCureHeadachesfromSecurity/ComplianceRequirements?

Visibility

BestPracWces RegulatoryRequirement HyTrust

HIPAA(Audit/LoggingControls) Adminlogs,compliancelogs,compliance/security%met

HIPAA(Audit/LoggingControls)

HIPAA(AccessMgmt/DataProtec<on)/HITECH

HIPAA(AccessMgmt/DataProtec<on)

HIPAA(DataProtec<on)/HITECH(SafeHarbor)

HIPAA(DataProtec<on)

Finegrainedpolicycontrolsandextended/customizableRBACs;APIs

RBACs,HyTrustBoundaryControl(definedbydatacenterorgeography)

Veryfastandtransparentcontrolsandencryp<on;ac<ve-ac<veconfigura<ons

HIPAA(AccessMgmt)

HIPAA(BusinessAssociates/AccessMgmt)/HITECH

HIPAA(DataProtec<on)/HITECH

Audit

AutomaWcEnforcement

VirtualizaWonspecific

Run-Wme

DetailedprotecWon

Extendcoverage

Supportoffshore/contractors

Performance

Admins

HyTrustBoundaryControl

HyTrustDataControl/Policies

Run-<meencryp<onandre-keying(nodown<me/reboots)

28templateswithautoma<chardening

Page 7: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.7

Thankyou

www.Hytrust.com@hytrust

Page 8: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.8

Don’tBreakYourBack!HeavingLioing?Alreadydone.(HyTrust/HIPAAMapping)

Page 9: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.9

HyTrustWorkloadSecurityJourney

HyTrustDataControl

HyTrustCloudControl

HyTrustBoundaryControl

Protectservervirtualiza<onPrivatecloudSecuremul<-tenancy

01 Workloadencryp<onPubiccloudIaaSmigra<on

02 Mul<-cloudSooware-definedboundaryDatasovereignty

03

Page 10: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.10

What

HyTrustCloudControl

Why

HyTrustCloudControlCapabili<es

*Cominginfuturereleases

Who How

Strongtwo-factorauthen<ca<on

IntegrateswithAc<veDirectory,RSASecureID,CAArcotID,RADIUSandTACACS+,SmartCards(PKI)

Rootpasswordvaul<ng

LogViewer*UnifiedAccessRole–PermissionsAssessmentTool*

Role-basedaccesscontrol(RBAC)

Workload/SMARTtagging

Workflowescala<ons/secondaryapprovals

30+preconfiguredroles

Forensiclevellogs

Real-<mealertsforsensi<veorabnormalac<ons

Built-inintegra<ontoSIEMtools(HPArcSight,Splunk,RSAEnVision,McAfeeePolicyOrchestrator

Page 11: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.11

HyTrustDataControl

On-premisesandcloudready–acrossallmajorcloudprovidersHyper-Convergenceready–builtintoNutanix,Simplvity,othersStorageready–includingSSDtechnology

HTDCprotectsdataeverywhere

HTDCprovideseasymanagementScalable,zerodown<mere-keymanagementandencryp<onSingleinterfaceregardlessofwheretheworkloadrunsPre-integratedtoKMIPclient/serverforeasyextensibility

HTDCprovidesdeepprotecWon

Workloadprotec<onfromboottodatawithcompletestackprotec<onPortablepolicytravelswithworkloadtoensurealwaysonprotec<onConnectswithHyTrustBoundaryControlandHyTrustCloudControlforautomatedandworkfloworientedsecurity

OrchestraWon

HyTrustKeyControlandPolicyEngine

Workload Workload

Hypervisor

Hardware

Admins

KeyControl–thekeymanagerthatensuresenforcementofpolicyviakeymanagement

PolicyAgent–<espolicytoworkloadandexecutesencryp<onanddecryp<on

PolicyEngine–ensureappropriatecontrolswithcontext

Page 12: HyTrust Heals Healthcare...What Keeps Healthcare CISOs Up At Night? 2% 6% 13% 15% 15% 19% 26% 29% 32% 33% 40% 70% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Insecure medical devices

©2016HyTrust,Inc.12


HEALTHVIEW SERVICES - hvsfinancial.com · HealthView Services draws upon healthcare claims from 70 million individual cases, actuarial, and government data to project retirement healthcare

GE Healthcare Vscan healthymagination Vs.-an ...GE Healthcare Vscan healthymagination Vs.-an 221ABBZX00252000g b Vscano & 5 500 Vscan 3.505 73 mm Vscan 70—7 USB Windows 135 mm Config

HyTrust Addendum to the VMware Product Applicability … · Federal Risk and Authorization Management Program (FedRAMP) ... (See section on Cloud Computing in this document for Cloud

HCI Corporate Medical Healthcare Brochure · Benefits HealthCare Emergency Plus HealthCare Standard HealthCare Plus HealthCare Premium HealthCare Executive Annual Maximum Healthcare

Role of IOT and Wearables in Healthcare...Healthcare Source: Frost & Sullivan Healthcare Spending by Type of Activity, Global, 2007–2025 5% 7% 12% 15% 17% 21% 70% 64% 51%longer 10%

HyTrust CloudControl Compliance Operations Guide · CloningaTemplate CloningaTemplate 1.SelectCompliance> Templates. 2.OntheSystemtab,selectthetemplateortemplatesthatyouwanttoclone,andclickClone

Evolve or Die: Security Adaptation in a Virtual Worldi.crn.com/custom/WP_EvolveorDie_EN_Final.pdf · New solutions from Hytrust, Ciphercloud, CloudLink, SafeNet, and even key management

Matteo Rosselli - COnnecting REpositoriesmeasured with ElastPQ (Affiniti 70 G Philips Healthcare) just before the hemodynamic assessment in all 70 participants, and also with vibration-controlled

China / Hong Kong Industry Focus China Healthcare Sector Healthcare Sector.pdf · drug sales and >70% sales of medical consumables/devices are generated from public hospitals. Public

39TH J.P. Morgan Healthcare Conference...70% GM with significant FCF at scale, all while advancing our mission to save lives and reduce healthcare costs. RUNWAY FOR GROWTH Will exit

SDDC Goes Mainstream: Hytrust 2016 Cloud Sddc Study Final

HyTrust CloudControl– SIEM and ITSM integration Comprehensive risk management across the hybrid cloud Solution Benefits Consistency is key to operationally efficient security and

UFGS 22 00 70 Plumbing, Healthcare Facilities 22 00 70.pdf · 2020-02-27 · SECTION 22 00 70 PLUMBING, HEALTHCARE FACILITIES 11/11 ***** NOTE: This specification covers the requirements

Appendix 2 – Individualized Healthcare Plan (IHP) Packet · Below 70 70-90 91-125 126-300 Above 300 *Fast Acting Sugar Sources (Do not give chocolate) 15 gm. Glucose tablets ½

HyTrust Appliance Administration Guide · HyTrust Appliance Administration Guide 11 The HyTrust Appliance (HTA) provides a centralized point of control for hypervisor configuration,

FedRAMP Product Applicability Guide for VMware, Coalfire ...€¦ · VMware Compliance Reference Architecture Framework HyTrust Addendum to the VMware Product Applicability Guide

PCI -Compliant Cloud Reference Architecture PCI -Compliant Cloud Reference Architecture Cisco, VMware, HyTrust, Trend Micro, Savvis and Coalfire have collaborated to construct a cloud

Hytrust vForum 2017 資料

Top 10 Encryption Myths - HyTrust · Microsoft Word - Top 10 Encryption Myths.doc Created Date: 3/7/2014 8:41:09 PM

GDPR Compliance with HyTrust - CYBERS · Affects a range of technology systems including data storage and collection, data encryption, and frameworks for privacy processes (through

HyTrust DataControl Administration Guide v 5

Implementing ID Governance in Complex Environments-HyTrust & CA Technologies

Introduction to Centaur Partners: SaaS Market Overview, · PDF fileGroup, Virident, DensBits Technologies, Coraid. Vmware. Blue Medora, Pivotal, HyTrust, Jfrog, Puppet Labs, Crittercism,

GDPR Compliance with HyTrust - cybers.eu · Geo-Tagging Processor level attestation with Intel TXT Boundary aware decryption Multi-cloud Policy based Encryption Dynamic & Zero Touch

Commercial Hospitality Museums Retail › acolyte › product_attachments...Entertainment Museums Retail Healthcare Public Spaces AVAILABLE LENS FINISHES Milky Lens 70% Light Transmission

Solution Implementation - · PDF filespecifications of PCI 2.0. Cisco partnered with RSA, HyTrust, EMC, VCE, and Verizon Business to

Vaccination against shingles - advice or healthcare ... · Vaccination against shingles: Information for healthcare professionals 7 become 70 or 78 years of age at any point in the

The Prevantics Difference - PDI Healthcare · 70% Isopropyl Alcohol (IPA) Control 30 sec Alcohol 70% IPA Prep Pad 15 sec Prevantics Device Swab 3.15% CHG/70% IPA Prevantics® Device

FedRAMP Compliant FlexPod architecture from NetApp, Cisco, HyTrust and Coalfire

Manage virtual infrastructure with HyTrust

GRC3386BUS GDPR Readiness with IBM Cloud Secure or … · 2019-06-27 · A Combined Security Offering from IBM, HyTrust and Intel® ICSV Solution Benefits HyTrust Software Provides

HBM Healthcare Investments Ltd · 2020-04-07 · Investment management & accounting (4) Contractually assured access to more than 70 industry experts worldwide A healthcare sector

DIGITAL TRANSFORMATION FOR HEALTHCARE · Digital Transformation Of Healthcare Today’s Healthcare Integrated Healthcare Collaborative Healthcare Transformative Healthcare • Culture

hytrust VM

HyTrust Appliance Installation Guide · 2014. 10. 11. · HA CLI Commands ... Manager, and Cisco Nexus 5000 and 7000 series switches. The HyTrust Appliance (HTA) offers system managers