Insider threats, ranging from malicious employees to well-meaning staff mistakes and compromised credentials, pose a significant risk to healthcare data. In this episode, we unpack:

• Types of Insider Threats: Malicious, negligent, and credential-based actors

• Prevention Tactics: Least‐privilege access, separation of duties, MFA, and endpoint hardening

• Detection & Monitoring: Behavior analytics, SIEM + DLP integration, and audit‐ready logs

• Response & Investigation: Insider‐threat playbooks, forensic collection, legal/HR coordination, and breach reporting criteria

• Building a Security Culture: Targeted drills, clear reporting channels, and positive reinforcement programs

MEDTECH MINUTE STORIES:

https://www.healthcareitnews.com/news/mclaren-notifies-743k-patients-about-data-breach

https://www.medtechdive.com/news/fda-stops-olympus-device-imports/751568/

https://healthtechmagazine.net/article/2025/06/exploitation-trends-underscore-need-layered-cybersecurity-healthcare

Telehealth isn’t just convenient—it’s a new attack surface for ePHI. In this episode, we'll walk through the end-to-end security controls every virtual care program needs:

• Choosing a fully HIPAA-compliant platform with end-to-end encryption and a solid BAA

• Strong patient authentication with identity proofing and multi-factor requirements

• Secure handling of session recordings, transcripts, and chat logs—encrypted at rest and in transit

• Staff training on private-session etiquette and quarterly security drills

• Building a telehealth-specific incident response playbook and real-time monitoring rules

MEDTECH MINUTE STORIES

https://www.hipaajournal.com/episource-data-breach/

https://www.bioworld.com/articles/721324-alphadesign-ai-creating-proteins-from-scratch

https://www.healthcareitnews.com/news/umass-inks-deal-begin-evaluating-health-ai-products

Medical devices are mission-critical, and too often under-protected. In this episode, we walk through a complete device-security playbook:

• Building an accurate inventory and risk score for every MRI, infusion pump, and bedside monitor

• Designing VLANs, firewalls, and zero-trust micro-segmentation to limit attacker movement

• Balancing OEM patch schedules with virtual patching to shield unpatchable legacy gear

• Implementing real-time monitoring, SIEM integration, and device-specific incident response runbooks

• Training clinicians and governing vendors to close human and third-party gaps

MEDTECH MINUTE STORIES

https://www.healthcareitnews.com/news/altera-chooses-health-gorilla-improve-interoperability

https://www.healthcareitnews.com/news/joint-commission-teams-chai-artificial-intelligence-guidance-health-systems

https://www.prnewswire.com/news-releases/hellocareai-enters-into-collaboration-with-mayo-clinic-for-ai-co-innovation-project-302476610.html