CYBER SECURITY IN HEALTH CARE

Brendan Kwolek
CIO
Halton Healthcare

Kopiha Nathan
Privacy and Compliance Officer
HIROC

Like all hospitals, University Health Network has been subjected to increased phishing attacks. To respond effectively, UHN has set up awareness campaigns, tabletop exercises to run through scenarios, as well as developed other in-house security responses to test the robustness of their systems.

Key session takeaways include:

• How to develop proactive awareness campaigns with respect to cyber security
• Developing and instituting best practices for responding to phishing attacks
• How health care organizations can develop partnerships to create regional responses
• Understand the enhanced security and resources UHN is providing to secure its data systems and medical equipment
• Learn how tabletop exercises are building resilience and system confidence

Marc Toppings
Vice President & Chief Legal Officer
University Health Network

Session description to be announced.

David Finley
He/Him
Global Director of Information Assurance and Cyber Security, Data Protection Division
DELL|EMC

When attacks occur, you must respond quickly to maximize your effectiveness. With Ransomware attacks the stakes are even higher.

Through this interactive session you will learn a host of duties you are required to carry out when you first encounter a Ransomware attack.

Through active participation in small breakout groups, you will undergo a Ransomware cyberattack exercise. We will provide response strategies and share valuable insights into resiliency and governance.

To understand what an effective Ransomware response looks like, HIROC will hold a networking breakout session where we go over the steps you must take to correctly respond to an event.

Key session takeaways include:

• Determine how to initiate the response, and how to mobilize your team
• Create an action plan on how to report the attack up the chain and to authorities
• Learn the best strategy to going back online, and how to learn from your experience

Kopiha Nathan
Privacy and Compliance Officer
HIROC

Too often front-line workers are ill equipped to deal with cyber-attacks and resorting to “not part of my job description” and “that is for the IT guys to deal with.” Aligning cyber breaches and phishing simulations with training sessions serves as an eye opener for just how easy it is to compromise your own organization.

Through exclusive case studies, we will focus on the lessons learned from training thousands of front-line healthcare workers. Exploring the various approaches from organizations of all sizes, you will understand how learning objectives are met and retained.

Session learning objectives include:

• Increase your understanding of how to train staff to amplify retention and awareness more effectively
• Assess the role of visuals (statistics, videos, examples) to convey the importance of cyber security education
• Attain new stats directly from case studies to demonstrate the efficacy of cyber awareness training
• Creative ways to design solutions for CHCs with limited budgets
• Gather lessons learned directly from the IT representatives of organizations who will provide their perspectives through a panel discussion with different perspectives

Simeon Kanev
Privacy Business Lead
Alliance for Healthier Communities

Tyler Kempt
IT System Administrator
Community Health Centres of Northumberland

The COVID 19 outbreak created an unprecedented case study in remote working. With businesses shuttering during the downturn, and hospital staff working both onsite and remotely, attacks still occurred, and the opportunity for security breaches were increased. What did we learn from the front lines of cyber security?

Key session takeaways include:

• How did training occur, and how effective was it?
• How did phishing attacks take place and how were they prevented?
• How was sensitive and patient data protected during remote access?

Mary Jane Dykeman
Partner and Co-Founder
INQ Data Law

Hospitals today are much more technologically intense than at any time in the past. Although this has made patient care much more efficient, and effective, it has also opened up hospitals to cyber-attacks.

As one of the most digitally sophisticated health care organizations in Canada, Humber River Hospital has devoted a great deal of time and resources to protecting its patients, data, and digital infrastructure from bad actors.

Key Takeaways and Learning Objectives Include:

• Leadership lessons on building a state-of-the-art cyber security program
• How to develop testing and training programs that effectively counter cyber attacks
• Why the human element continues to be the best defence to attacks
• How any organization can improve their own cyber-defence program
• On the ground examples of how attacks have been avoided and defended

Peter Bak
Chief Information Officer
Humber River Hospital