Healthcare IoT Security Operation Maturity

This paper asserts that HDOs must have an intimate understanding of their entire connected landscapes, otherwise, threat intelligence cannot be accurately processed or correlated to the right devices, and remediations will not deliver the desired impact. Although this paper did not detail the myriad possibilities associated with building a sophisticated multi-layered defense, it is not suggesting that other tools of the trade (e.g., SIEM, CMMS, ITAM, VM, etc.) are not needed. Rather, it argues that processes that continuously improve visibility and its orchestration, EDR, and containment capability must be in place, or these additional defense layers cannot perform at their highest intended levels.

• Comprehensive clinical network visibility is “must have” capability, and recent advances can now deliver it. HDOs cannot afford to accept the tradeoffs typical of inferior and/or legacy solutions. The state-of-the-art is the minimum requirement.