It is hard to defend your healthcare systems if you do not understand the threats, vulnerabilities, and adversaries. Simply subscribing to vulnerability and threat intelligence feeds often result in huge amounts of data without useable or actionable information to help mitigate attacks against our assets. This session will describe the methods used by Seattle Children’s Hospital and show how carefully correlated and contextual threat intelligence can provide understanding about what controls to implement to help mitigate the risk of unauthorized use, access, or disclosure.

---

Learning Objectives:

• Discuss new threat spectrum and abilities of our adversaries
• Identify what information security practices sets can reduce the risk of a breach
• Explain the importance of board level involvement and review of information security risks

Cris Ewell, PhD, CISO, Seattle Children’s