The WannaCry attack of 2017 demonstrated that hospitals around the world could easily be victimized by ransomware. More disturbingly, however, WannaCry clearly demonstrated that medical devices and not just information systems could be compromised by ransomware. This creates a whole new and wholly unacceptable meaning for the term Denial of Service and demonstrates the patient safety issues that underlie insecure medical device deployments. This presentation will cover the established industry standards for the secure deployment of medical devices laid out by OWASP and the Cloud Security Alliance in the OWASP Secure Medical Device Deployment Standard v2.

Christopher Frenz, AVP of Information Security and Infrastructure, Interfaith Medical Center