HOSTED BY MIKE MURRAY
In Scope is the healthcare cybersecurity podcast that tackles the critical security issues facing hospitals, clinics and other healthcare delivery systems in candid conversations with healthcare security leaders and host Mike Murray.
In this episode, Mike welcomes Mifan Careem, Vice President – Solutions Architecture at WSO2. Join us as they discuss consent management, the process of involving patients and users in deciding which pieces of data can be shared or exposed between applications and for what duration. Mifan sees consent management as playing a big role in the future of healthcare security.
In the second part of this special two part episode with the FDA’s Suzanne Schwartz and Kevin Fu, the discussion turns to the increasingly prevalent topic of ransomware.
In part one of this two-part special episode, Mike welcomes Suzanne Schwartz, Director of the Office of Strategic Partnerships and Technology Innovation (OST) at FDA’s Center for Devices & Radiological Health (CDRH) and Kevin Fu, Acting Director of Medical Device Cybersecurity at FDA’s Center for Devices and Radiological Health (CDRH) and Program Director for Cybersecurity. Join us as they talk about the FDA’s journey to designing cybersecurity standards for medical devices including establishing pre and post-market policy, threat modeling and SBOMs (Software Bill of Materials).
In this episode, Mike welcomes recovering hacker Alissa Knight and HL7 Standards Architect and member for the FHIR Management Group, John Moehrke. Join us as they discuss Fast Healthcare Interoperability Resources (FHIR), a standard that defines how healthcare information is exchanged between computer systems. John and Alissa both acknowledge the challenges of maintaining a standard where implementations vary greatly.
In this episode Mike welcomes Esmond Kane, CISO of Steward Health. Join us as they discuss the risks accompanying advances in technology allowing doctors to treat patients remotely. As a CISO Esmond knows these risks can’t be eliminated entirely, but they must be managed.
Mike is joined by Mike Nelson VP of IoT Security at DigiCert. Join us as they talk about how COVID has accelerated the need for hospitals to secure connected devices not only within the hospital but well beyond it. Connectivity brings about its fair share of challenges, including authentication, encryption and integrity. PKI is particularly relevant because it’s a starting point for many manufacturers and the rate at which hospitals are beginning to adopt it.
The news of large-scale attacks at Colonial Pipeline and Scripps Healthcare has brought ransomware back into the news. With lines for gas on the east coast, and Scripps’ medical personnel having to resort to using paper records to track patient interaction, Mike welcomed back noted security researcher and lecturer at Boston University, Kai Bernardini to discuss the alarming trend of ransomware gangs pooling their resources to offer ransomware as a service and the present and future directions of ransomware.