Episode #07: Protecting Against Insider Threats

Episode #08: Cloud Migration for Healthcare: Risks & Rewards

Thinking about moving your EHR, imaging systems, or analytics to the cloud? In this episode, Will Evertsen walks you through: * Migration models & benefits (public, private, hybrid) * Top risks—from misconfigurations and shared-responsibility gaps to data residency and cost sprawl * Secure migration guardrails—identity & access management, encryption & key control, network isolation, and infrastructure-as-code * Optimizing cloud ops—continuous monitoring, cost governance, and automated disaster-recovery drills   MEDTECH MINUTE STORIES:   https://www.medicaleconomics.com/view/57-of-patients-say-yes-to-ai-in-the-exam-room-if-it-means-more-time-with-their-doctor [https://www.medicaleconomics.com/view/57-of-patients-say-yes-to-ai-in-the-exam-room-if-it-means-more-time-with-their-doctor] https://www.healthcareitnews.com/news/northwell-deploys-new-safety-and-security-tech-motorola [https://www.healthcareitnews.com/news/northwell-deploys-new-safety-and-security-tech-motorola] https://insights.citeline.com/medtech-insight/digital-technologies/cybersecurity/fda-publishes-final-cybersecurity-guidance-to-replace-final-cybersecurity-guidance-IHPBWNQ6V5E3TCIKCIOJE6HDZA/ [https://insights.citeline.com/medtech-insight/digital-technologies/cybersecurity/fda-publishes-final-cybersecurity-guidance-to-replace-final-cybersecurity-guidance-IHPBWNQ6V5E3TCIKCIOJE6HDZA/]

Episode #07: Protecting Against Insider Threats

Insider threats, ranging from malicious employees to well-meaning staff mistakes and compromised credentials, pose a significant risk to healthcare data. In this episode, we unpack: * Types of Insider Threats: Malicious, negligent, and credential-based actors * Prevention Tactics: Least‐privilege access, separation of duties, MFA, and endpoint hardening * Detection & Monitoring: Behavior analytics, SIEM + DLP integration, and audit‐ready logs * Response & Investigation: Insider‐threat playbooks, forensic collection, legal/HR coordination, and breach reporting criteria * Building a Security Culture: Targeted drills, clear reporting channels, and positive reinforcement programs   MEDTECH MINUTE STORIES: https://www.healthcareitnews.com/news/mclaren-notifies-743k-patients-about-data-breach [https://www.healthcareitnews.com/news/mclaren-notifies-743k-patients-about-data-breach]  https://www.medtechdive.com/news/fda-stops-olympus-device-imports/751568/ [https://www.medtechdive.com/news/fda-stops-olympus-device-imports/751568/]  https://healthtechmagazine.net/article/2025/06/exploitation-trends-underscore-need-layered-cybersecurity-healthcare [https://healthtechmagazine.net/article/2025/06/exploitation-trends-underscore-need-layered-cybersecurity-healthcare]

Episode #06 - Telehealth Security: Best Practices for Virtual Care

Telehealth isn’t just convenient—it’s a new attack surface for ePHI. In this episode, we'll walk through the end-to-end security controls every virtual care program needs: * Choosing a fully HIPAA-compliant platform with end-to-end encryption and a solid BAA * Strong patient authentication with identity proofing and multi-factor requirements * Secure handling of session recordings, transcripts, and chat logs—encrypted at rest and in transit * Staff training on private-session etiquette and quarterly security drills * Building a telehealth-specific incident response playbook and real-time monitoring rules   MEDTECH MINUTE STORIES   https://www.hipaajournal.com/episource-data-breach/ [https://www.hipaajournal.com/episource-data-breach/] https://www.bioworld.com/articles/721324-alphadesign-ai-creating-proteins-from-scratch [https://www.bioworld.com/articles/721324-alphadesign-ai-creating-proteins-from-scratch] https://www.healthcareitnews.com/news/umass-inks-deal-begin-evaluating-health-ai-products [https://www.healthcareitnews.com/news/umass-inks-deal-begin-evaluating-health-ai-products]

Episode #05: Securing Medical Devices

Medical devices are mission-critical, and too often under-protected. In this episode, we walk through a complete device-security playbook: * Building an accurate inventory and risk score for every MRI, infusion pump, and bedside monitor * Designing VLANs, firewalls, and zero-trust micro-segmentation to limit attacker movement * Balancing OEM patch schedules with virtual patching to shield unpatchable legacy gear * Implementing real-time monitoring, SIEM integration, and device-specific incident response runbooks * Training clinicians and governing vendors to close human and third-party gaps   MEDTECH MINUTE STORIES https://www.healthcareitnews.com/news/altera-chooses-health-gorilla-improve-interoperability [https://www.healthcareitnews.com/news/altera-chooses-health-gorilla-improve-interoperability] https://www.healthcareitnews.com/news/joint-commission-teams-chai-artificial-intelligence-guidance-health-systems [https://www.healthcareitnews.com/news/joint-commission-teams-chai-artificial-intelligence-guidance-health-systems] https://www.prnewswire.com/news-releases/hellocareai-enters-into-collaboration-with-mayo-clinic-for-ai-co-innovation-project-302476610.html [https://www.prnewswire.com/news-releases/hellocareai-enters-into-collaboration-with-mayo-clinic-for-ai-co-innovation-project-302476610.html]

Episode #04: Mobile Device Management In Clinical Settings

In this episode of The MedTech Monitor, we tackle the critical challenge of securing smartphones, tablets, and laptops in modern clinics. You’ll learn: * BYOD vs. Hospital-Issued Devices: Pros and cons of each model and how to choose what’s right for your practice. * MDM vs. EMM/UEM Essentials: Core features—device enrollment, configuration profiles, and unified endpoint management explained. * Policy Framework: Step-by-step guidance on enrolling devices, enforcing encryption, passcodes, Wi-Fi/VPN settings, and compliance checks. * App Vetting & Distribution: Whitelisting vs. blacklisting, enterprise app stores, and app-wrapping strategies to safeguard ePHI. * Monitoring & Wipe Procedures: Real-time health checks, geofencing, and lost–stolen device protocols—including remote lock, selective and full wipe, plus audit-ready logging. Download the MDM Policy Checklist here: https://getmediguard.com/wp-content/uploads/2025/06/MDM-Policy-Checklist.pdf [https://getmediguard.com/wp-content/uploads/2025/06/MDM-Policy-Checklist.pdf]   MedTech Minute News Stories 1. https://www.beckershospitalreview.com/healthcare-information-technology/telehealth/cleveland-clinic-virtual-care-service-expands-to-50-states/ [https://www.beckershospitalreview.com/healthcare-information-technology/telehealth/cleveland-clinic-virtual-care-service-expands-to-50-states/] 2. https://www.medtechdive.com/news/clairity-de-novo-ai-breast-cancer-risk-prediction/749697/ [https://www.medtechdive.com/news/clairity-de-novo-ai-breast-cancer-risk-prediction/749697/] 3. https://www.healthcareitnews.com/news/florida-provider-settles-ocr-800000-over-hipaa-security-rule-allegations [https://www.healthcareitnews.com/news/florida-provider-settles-ocr-800000-over-hipaa-security-rule-allegations]