About the Southern California Cybersecurity Forum

San Diego, CA  |  Hyatt Regency La Jolla at Aventine |  February 5 

Michael Archuleta
Michael Archuleta
Chief Information Officer
Mount San Rafael Hospital
Sri Bharadwaj
Sri Bharadwaj CISSP, PMP
Director, Information Services and Chief Information Security Officer
UC Irvine Health
Bob Cash
Bob Cash
Vice President, Provider Relations
KLAS Enterprises
Christian Dameff
Christian Dameff MD
Emergency Physician, Clinical Informatics Fellow
Department of Emergency Medicine, University of California San Diego
Steve Hunter
Steve Hunter
VP Marketing
H-ISAC
Richard Staynings
Richard Staynings
Chief Security Strategist
HIMSS Privacy & Security Committee and AEHIS Board Member
Jason Borinski
Jason Borinski
Senior Manager Information Security
Dexcom
John Camacho
John Camacho
Member
San Diego CISO Roundtable
Chris Convey
Chris Convey CISA, CISSP, MS
Vice President, IT Risk Management and Chief Information Security Officer
Sharp Healthcare
Drew Ganther
Drew Ganther
Regional Director, West
Medigate
Mark Hagland
Mark Hagland
Editor-in-Chief
Healthcare Innovation
Sara Hall
Sara Hall
Chief Operating Officer
H-ISAC
Patrick Phelan
Patrick Phelan
Chief Information Security Officer
UCSF and UC Davis Health
Monte Ratzlaff
Monte Ratzlaff
Director, Cyber Risk Program
University of California Office of the President
Richard Staynings
Richard Staynings
Chief Security Strategist
HIMSS Privacy & Security Committee and AEHIS Board Member
avatar
Kenneth Wottge
Information Security Officer
UC San Diego Health

Interested in sponsoring this program? Visit our sponsor information page.

Agenda

Wednesday, February 5, 2020
8:15 AM
9:00 AM
Featured Presentation

 

Like it or not healthcare delivery is changing, we are more reliant upon technology today than ever before to diagnose, treat, observe, manage and monitor patients. A basic systems outage is enough to bring an entire hospital or clinic to its knees. Just look at what happened in the UK when Ransomware took down much of the NHS. But our technology reliance is not just focused on IT systems any longer, there are a multitude of different Healthcare Internet of Things (HIoT) devices that we use to improve patient outcomes. All kinds of medical devices, from IMDs, to pumps, to scanners, to patient and nurse call systems, all of which are critical in direct patient care. And let’s not forget, that we cannot do without HVAC systems, elevators, power, water and other building management systems, nearly all of which are now ‘smart’ and ‘connected’. What happens when these simple devices are attacked by extortionists and cyber-criminals? Do most of us even know how many we actually have in each location, when they were last patched, and what security risks they pose to patients and to hospital IT systems? Just because they may be connected to an isolated network or VLAN doesn’t mean they are isolated. How can we gain greater visibility into what’s happening in our hospitals and become better prepared to defend ourselves from the next inevitable attack?

 

 

9:30 AM
Panel Discussion

 

Join our panel members for an in-depth discussion on current cybersecurity trends and issues in healthcare. Discussion topics will span from board/stakeholder engagement to cloud security, to risk management frameworks, medical device security and more.

 

10:30 AM
10:45 AM

 

Industry partner spotlights feature in-depth discussions from select industry partners. All industry partner sessions are reviewed by our advisory council before being presented in the program.

 

 

11:15 AM
Featured Presentation

 

As technology becomes seamlessly integrated into businesses, the strategy and risk management of that technology needs to be just as seamlessly integrated into business discussions. Join Sara Hall for a discussion on how cyber leadership can sell this integration to top leadership as part of doing business in the technology age.

 

 

11:45 AM
Featured Presentation

 

Fully managed SIEM/MSSP is an affordable option for establishing a SOC; however, most providers offer black-box solutions with limited visibility and assurance that the environment is secure. Internally managed SIEM is expensive, requiring significant resources and funding, but offers rich features, customization, and visibility. Co-managed SIEM + MSSP offers the benefits of both approaches, including reasonable costs with the additional visibility and assurance.

 

 

12:15 PM
1:00 PM
Panel Discussion

 

Securing medical devices is one of the greatest challenges facing healthcare providers today and, yet, there is little information in the industry regarding best practices, common struggles and how organizations are overcoming them, and which manufacturers are seen as most secure and transparent about vulnerabilities. Join this session to learn about how your colleagues are managing medical device security in their organizations.

 

1:45 PM
2:00 PM

 

Industry partner spotlights feature in-depth discussions from select industry partners. All industry partner sessions are reviewed by our advisory council before being presented in the program.

 

 

2:30 PM
Featured Presentation

 

Managing access to your networks, applications and devices through a strong Identity and Access Management program is a challenge for information security and business leaders alike. Join this session to learn how clinical leaders, hospital administration, CIOs, CISOs and other critical members of your leadership team must work together to develop a strong identity and access management strategy that secures your organization.

 

 

3:00 PM