In this episode...

• We discuss what in the world is going on in the healthcare space, and why they’re such a target for attackers
• Dustin discusses why the explosion in digitalization in health care is both amazing and terrifying
• We discuss future-proofing “smart” healthcare
• I stumble on “the fundamentals”
• Dustin discusses the security of “data analytics” in the healthcare space
• I ask how we can make health care professionals better security people, without making them security people
• I ask Dustin what the healthcare industry should be doing, going forward into 2016

Guest

• "Dustin" is a progressive CISO at a Fortune 250 Healthcare organization

In this episode...

1. Vizio is getting sued, over data their TVs collect?
   • James provided security tips on the local news station and one of those tips was around the privacy details of your gadgets
   • Companies need to be considering what they are doing with their data
   • At what point does data go from an asset to a liability?
   • Do companies understand the difference?
   • http://www.consumerreports.org/lcd-led-oled-tvs/vizio-sued-for-smart-tv-data-sharing
2. Wyndham settles (caves to) the FTC
   • Agrees to legally be bound to do things they should already be doing .. ?
   • 20 years of audits
   • Interesting ending to the long saga, assuming the courts approve
   • https://www.ftc.gov/news-events/press-releases/2015/12/wyndham-settles-ftc-charges-it-unfairly-placed-consumers-payment
3. The US Federal Bureau of Investigation (FBI) admits to using 0day vulnerabilities
   • Why is anyone surprised?
   • Goes to a question of trust, and that's it.
   • Are these being found anyway through programs like bug bounties?
   • http://searchsecurity.techtarget.com/news/4500260464/FBI-admits-to-using-zero-day-exploits-not-disclosing-them
4. Google introduces DLP into Google Apps
   • So far it's just for their Unlimited customers
   • Are we reaching a tipping point where security becomes a feature and not a stand-alone discipline?
   • Definitely a game-changer
   • Basic patterns and detection built-in FREE
   • http://techcrunch.com/2015/12/09/new-google-apps-feature-helps-businesses-keep-sensitive-information-out-of-emails/
5. Black boxes on ships can be hacked
   • Could be worse, someone could be claiming to make the boat float sideways?
   • Is this a big deal, probably; is it a bigger deal than other things wrong?
   • Who is exploiting this, and how do the good guys fix the problem?
   • http://arstechnica.com/information-technology/2015/12/hacked-at-sea-researchers-find-ships-data-recorders-vulnerable-to-attack/

Thanks for joining us! This is a very important episode with true experts on the topic of cyber insurance. I was lucky enough to get an attorney and a VP of an insurance firm who specialize in the topic and their depth of knowledge and candor may shock you.

The net is that cyber insurance is a positive for our industry.

In this episode..

• Eran says that if you don’t do good security, the courts will frown down upon that
• Keith tells us why insurance covers security, but it does not cover negligence
• We start back on the discussion on the importance of knowing your critical assets
• Keith discusses why the insurance market is essentially a mirror of your program
• Eran talks about how his team dissect and investigate breaches to improve understanding
• Keith and Eran discuss how the process of buying cyber insurance can actually lead to improved security

Guests

• Eran Kahana ( https://www.linkedin.com/in/erankahana ) - Attorney, Maslon, LLP with extensive data security experience and an expert in cyber insurance marketplace.
• L.Keith Burkhardt ( https://www.linkedin.com/in/keith-burkhardt-587b3772 ) - VP, Kraus-Anderson Insurance where he works towards innovative products and services for the industry and has been addressing the cyber insurance market for about two years.