2024 Agenda

Healthcare organisations collect a lot of sensitive data. This carries with it a great deal of responsibility for leaders in cyber and information management, but there are some practices we can implement to better manage patient and hospital data.

Key Session Takeaways Include:

• The importance of the notion of no blame and trust so that people to report issues and errors
• Data governance and the role of Zero Trust
• Why you need to be aware of where your data is, how it’s being used, and who is using it
• Other contentious issues cyber leaders need to know

Building robust and effective cyber defences requires a great deal of coordination. Without collaboration, gaps expand, and threats have a greater chance of succeeding.

This panel will discuss the lessons learned from taking a collaborative approach to cybersecurity.

Key Session Takeaways Include:

• Value of Managed Services for IoMT cybersecurity
• Leveraging people, process & technology to alleviate business risk
• Understanding the risks associated with lack of IoMT cybersecurity strategy

With changes in technology arriving faster, and new builds and wings being implemented more and more, cyber defences are also being re-imagined, upgraded, and rolled out. This leads us on a path of continuous development.

Between smart buildings, IoMTs, and new security protocols being launched, it makes sense to take stock of current and future practices. From a complete rebuild, to a creative redesign, we will look at some examples that are working, and some lessons learned along the way.

Key Session Takeaways Include:

• Best practices in building a cyber program from scratch, and what they may entail
• Incorporating medical devices, and particularly the challenges of securing legacy devices
• Lessons learned on deploying new cyber programs across the hospital
• Health Industry Cybersecurity Practices (HICP) – some effective guidance from the US government that can be applied across jurisdictions

There continues to be unprecedented attacks on healthcare organizations, many automated and aided by AI. Just as AI is driving innovation and efficiency in all verticals, it’s also driving malicious and criminal activity on the web. The very first website went online just 33 years ago. Today there are over 200 million Active websites. To say that the attack surface has exploded, is an understatement. And the explosion of API’s in healthcare has amplified the threat 100x or 1000x. So how can healthcare organizations keep up and safeguard their patient and employee data?  

Building on internal and proprietary research, we will discuss our annual Bot report to show how the threat is increasing, becoming more sophisticated, and what you can do to protect yourself.

 Key Session Takeaways Include:

• Where are threat actors focusing efforts, and how are ransom attacks and DDOSs playing out
• How is AI being used, and where to focus our efforts for the best results
• What has succeeded and what hasn’t – and why?
• How possibly just reordering priorities can turbocharge our efforts, free up FTE’s and increase ROI

During this discussion, Ontario Health will further elaborate on the current status and future direction of the Provincial Cyber Security Operating Model, including its incident response notification guidance.

 Key Session Takeaways

• Update on the progress for Ontario Health’s Provincial Cyber Security Operating Model
• Key successes hospitals are experiencing
• Operational next steps for Local Delivery Groups and General Hospitals

Sophisticated cyber attacks continue to target the healthcare sector. And when systems must go offline, physicians and front-line clinical staff no longer have access to digital files or patient records.

Preparing for this contingency is essential for the smooth transition and running of patient health services. There must be specific exercises and protocols in place before a situation arises.

Engaging physicians for training scenarios remains a challenge across organisations? So how did SickKids, who had a recent attack, engage with their physicians to plan for eventual Code Greys?

Key Session Takeaways Include:

• How can hospitals reach out to physicians more effectively to take part in emergency planning?
• What is the role of emergency managers, CMIOs, physicians, and cyber teams in developing training plans to ensure a smooth transition?
• What lessons were learned from SickKids breach when it comes to training and engagement – and how much has changed?

The dark web plays a major role in the world of cyber crime. It also provides a greater understanding how threat actors operate in the development of attacks, and also how they sell the sensitive information they extract.

Monitoring and leveraging the information on the dark web can provide important insights into how you can protect your organization from future attacks.

Key Session Takeaways Include:

• How does the Dark Web marketplace operate when data is stolen
• Understand how dark web intelligence can be used to proactively identify threats targeting healthcare organizations
• A discussion of the types of insights that can be gained from monitoring the dark web, including early warnings of potential data breaches and emerging attack trends

We are seeing AI deployed more and more in attacks. But it’s also suitable to deploy in combating those attacks. In fact, AI is taking on a major role in cybersecurity, and it is essential healthcare cyber professionals have a solid understanding of its place in cybersecurity.

In this panel, experts delve into modern cyber resilience, AI’s role in security, leveraging AI for protection, and emerging market solutions prioritizing cyber resilience.

Over the course of 45min we dig into answers to the following questions:

• What does achieving cyber resilience look like in today’s healthcare landscape?
• What critical elements constitute best practices in healthcare cybersecurity to effectively reduce the risk of exposure?
• In what ways can AI assist the healthcare sector in safeguarding its vital systems and ensuring data privacy?
• What are some present instances of cyber AI applications that have bolstered cyber resilience amid the rising adoption of AI technology by hackers?

Planning and response for Cyber incidents are often measured in cost to the organization and potential reputational damage. This is appropriate for private sector and for-profit companies. Of course, healthcare organizations experience a large cost associated with an incident as well, but for healthcare, there are more immediate and critical considerations.

This session will discuss some of the unique situations facing healthcare, how risk has increased and healthcare specific considerations in planning for the worst.

Key Session Takeaways Include:

• What does the data show us and what should we track?
• Patient safety metrics in measuring incident impacts
• How the threat landscape has evolved and associated risk
• What do we need to do as a system to improve