The Collective Voice of Health IT; a WEDI podcast
Third Party Vendors Security Concerns in Healthcare: A Chat with Phil Englert, Director of Medical Devices Security at Health-ISAC
Link to the podcast:
https://www.listennotes.com/podcasts/the-collective/episode-87-third-party-yRWwEpqMBU8/#episode
1-26-2023
ABOUT THIS EPISODE
Data breaches from healthcare vendors, which are considered “business associates” under HHS’ Office of Civil Rights breach portal have grown over the past 5 years, including 116 reported business associate breaches since November 2022 which have affected over 17 million patients.
Michael chats with Phil Englert, Director of Medical Device Security for the Health Information Sharing and Analysis Center (Health-ISAC) about the industry’s concerns regarding security concerns with third party vendors and medical devices.
Phil about his role at Health-ISAC, “There are lot of interactions helping medical device manufacturers understand the needs of healthcare delivery organizations and helping the healthcare delivery organizations understand the limitations that manufacturers have sometimes delivering to those needs and finding the middle ground of what we have available today.” “Medical devices are responsible for creating the information that allows caregivers to make informed, competent decisions.”
- Related Resources & News
- Health-ISAC Health Sector Heartbeat – Q2 2026
- Healthcare Cybersecurity Always Comes Back to People
- 2026 Health-ISAC CISO Benchmarking Report
- June Incident Response Insights
- New critical infrastructure cybersecurity framework features government, regional council options
- Frontier AI in the Health Sector: Managing Supply Chain and Vendor Risk
- The State of Enterprise Cyber Crisis Readiness (report)
- Human Risk Management 90-Day Playbook
- Cybercriminals Flock to Healthcare Businesses as Attacks Surge
- DHS Revives Critical Infrastructure Threat Sharing, Without the Legal Shield Industry Wants