How hospitals can spot a cyber intrusion on a medical device before it spreads

Medical device security is too big to solve all at once, and Tara Lansing-Deis thinks that is exactly why hospitals need a reactive plan now. In the latest episode of HealthStealth Radio on Healthcare Now Radio, host Jessica Davis talks with Lansing-Deis, a principal security consultant who moved from recording studios into clinical engineering and then cybersecurity, about what an attack on a medical device looks like in the clinical setting and how to build an incident response process around the devices already on your network. With Boston Scientific reporting global disruptions tied to a cyberattack and the FDA finalizing its device cyber requirements, the conversation lands on practical steps provider organizations can take today.

In this episode:

• Why the first line of detection is almost always a clinician or HTM technician, and why a ticket that says a system is “running slower than normal” now deserves a security review instead of a reboot
• The indicators of compromise to watch for, including unusual data volumes, unfamiliar protocols and new connectivity points
• How to fold healthcare technology management into your existing incident response team, starting with the playbooks and escalation paths you already have
• Why releasing a device back into use without verifying every symptom is resolved amounts to negligence
• The policy, procedure and awareness gaps that let intrusions slip through, and the shift toward moving HTM under the IT umbrella

Listen to the full episode of HealthStealth Radio on Healthcare Now Radio for the complete conversation on tactical incident response for medical devices.