Blended Threats Whitepaper

In this informative paper, created from the
H-ISAC Blended Threats Exercise Series final findings report,
you’ll learn:
- – Actionable information for health care delivery organizations (HDOs), medical device manufacturers (MDMs) and healthcare information technology vendors to prepare for, exercise, and respond to black swan events.
- – 8 Best Practices for Blended Threat Mitigation
- – 4 areas of improvement within the Healthcare sector from a Whole-of-Organization approach
- – 10 areas to benchmark improvements toward Preparedness
- – An InfoSec wishlist to build capabilities for Healthcare sector resilience
- – Healthcare sector identified areas of challenge open for discussion
Key Takeaways:
Whole-of-Organization Approach
– Cybersecurity programs should be looked at as an important component of the whole business.
Plan Now to Prepare for a Threat
– Browse the nine topics identified for Preparation and Practice to see where your organization is lacking and where to start planning a best response.
Cyber and Physical Security Connection
– The Best Practices section and the Areas for Sector Improvement sections identify processes for cyber and physical security personnel to work together, which departments should be connected and how to keep the chief levels informed during an incident.
Abstract
Sharable outcomes aggregated from the Health-ISAC Blended Threats exercise series provide actionable information for the H-ISAC community to discuss, exercise, prepare for, and respond to black swan events. The six workshops enabled participants to focus on enterprise risk management. Exercise discussions yielded shared success strategies, identified opportunities to enhance security postures, and addressed several challenges from the viewpoint of healthcare delivery organizations (HDOs), medical device manufacturers (MDMs) as well as healthcare information technology (IT) vendors. This paper shares valuable ideas and considerations for the H-ISAC community to adapt and further develop to increase security and preparedness in a complex and blended threat environment.
- Related Resources & News
- Potential Terror Threat Targeted at Health Sector – AHA & Health-ISAC Joint Threat Bulletin
- New Cybersecurity Policies Could Protect Patient Health Data
- CyberWire Podcast: PHP flaw sparks global attack wave
- Health-ISAC Hacking Healthcare 3-14-2025
- HSCC Aiming to Identify Healthcare Workflow Chokepoints
- New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks
- Are Efforts to Help Secure Rural Hospitals Doing Any Good?
- CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
- 2024 Health-ISAC Discussion Based Exercise Series After-Action Report
- Cobalt Strike takedown effort cuts cracked versions by 80%