The Orangeworm Mystery Plaguing the Health Sector
by James Scott, Co-Founder and Sr. Fellow, ICIT The International healthcare community is currently beleaguered by an obscured adversary with illusive motives. Supply chain attacks on healthcare providers, pharmaceutical companies and medical sector information technology solution providers and equipment manufacturers via phishing emails first emerged in January 2015. The majority of the hundred attacks remain .. read more
ICIT Analysis: FDA Guidance on Medical Device Cyber Security
This Institute for Critical Infrastructure Technology blog post, entitled “Assessing the FDA’s Cybersecurity Guidelines for Medical Device Manufacturers: Why Subtle “Suggestions” May Not Be Enough” is an objective analysis of the recent Food and Drug Administration (FDA) “Draft Guidance for Industry and Food and Drug Administration Staff.” The guidance advises medical device manufacturers to address .. read more
ICIT Brief: Hacking Healthcare IT in 2016: Lessons the Healthcare Industry can Learn from the OPM Breach
Among all of America’s critical infrastructures, the healthcare sector is the most targeted and plagued by perpetual persistent attacks from numerous unknown malicious hackers. The goal of these threat actors is to exploit vulnerabilities in insecure and antiquated networks in order to exfiltrate patient data for financial or geopolitical gain. In order to protect patient .. read more
Legislative Brief: “Preventative Measures- Ensuring Information Security Prior to mHealth Development”
The Institute for Critical Infrastructure Technology issued its latest legislative briefing titled “Preventative Measures- Ensuring Information Security Prior to mHealth Development”. The brief is an analysis of the proliferation of mobile technologies in the healthcare ecosystem, addressing the benefits mobility brings to patients and health providers as well as data privacy risks that exist if these technologies are .. read more
ICIT Speaks at U.S. Senate “Health Sector Fly-In” on Cybersecurity
The Institute for Critical Infrastructure Technology co-hosted and spoke at the inaugural Health Sector Fly-In Tuesday June 2, 2015, which was held at the United States Senate and sponsored by Senator Lamar Alexander (TN). As a member of the Healthcare and Public Health (HPH), Sector Coordinating Council (SCC) and the SCC Cyber .. read more
National Health Sector Fly-in @ United States Senate
Speakers Include – Wesley Snell, Director CSIRC, HHS – Suzanne Schwartz, Director Emergency Preparedness/Operations & Medical Countermeasures, FDA – Steve Curren, Director (Acting), Division of Resilience and Infrastructure Coordination, HHS – Julie Chua, Information Security Specialist, ONC – Deborah Kobza, Executive Director, NH-ISAC – Dan Waddell, Managing Director, National Capital Region, (ISC)2 – .. read more
ICIT Briefs Congress on HR691 Telehealth Modernization Act of 2015
ICIT briefed members of the Rural Health Caucus on HR691 – Telehealth Modernization Act of 2015, where Fellows provided expertise on rural health, telemedicine, and privacy issues surrounding telehealth initiatives. ICIT Fellows advised for strong security and access management, interoperability between EHRs, patient access to data, and the securing of data pathways themselves. Click here .. read more
HHS, ICIT Fellows Collaborate on Privacy and Data in Healthcare
Thursday, March 26, the Institute for Critical Infrastructure Technology (ICIT) hosted their monthly Fellow Meeting, with featured thought leaders Dr. Kafi Wilson, MHA (ICIT Fellow and CEO, KWMD) and Laura Elizabeth Rosas (Lead Public Health Advisor, Health IT Team, Substance Abuse and Mental Health Services Administration [SAMHSA], U.S. .. read more
