Incident response is changing dramatically. The approaches employed by most healthcare organizations are incredibly process-driven but not typically nimble or flexible enough to respond to the challenges presented by today’s cyberattacks. Further, the objectives and practices employed by traditional incident response do not take into account patient and life safety. New paradigm and approaches are required, and we believe that Cybersecurity Tactical Incident Response (CTIR) is the new generation of incident response.

During this presentation, we will examine why traditional incident response approaches breakdown and become ineffective during fast-moving or prolonged incidents. Also, how approaches that employ protocols, immediate action drills (IAD), and minimalism are critical to not only protecting infrastructure but human life. We will also examine the core tenets of Cybersecurity Clinical Rapid Response and how this supports a CTIR program. Why integration between CTIR teams and OEM groups is vital and why FEMA certification of CTIR personnel is essential.

During the presentation, we will also review case studies of incident response gone wrong and why, especially when it came to protecting patient safety. The program will also discuss the Left/Right of Bang planning cycle and how it applies to incident response.

John Gomez, CEO, Sensato