CISO Resources

Best Practices

• Tabletop Exercise for Assessing the Impacts of Remote Workers on Healthcare Incident Response
• Information Technology Considerations for a Disease Outbreak
• OWASP Secure Medical Device Deployment Standard
• AEHIS Interact Listserve (Members Only)
• Health Industry Cybersecurity Practices

Frameworks

• NIST Releases Version 1.1 of its Popular Cybersecurity Framework

Plans

• Medical Device and Health IT Joint Security Plan

Public Policy Resources

• AEHIS Public Policy Resources

Incident Response

• Healthcare Sector Preparations for the Threat of Nation State Sponsored Cyber-Attacks Against Critical Infrastructure
• IR Tabletop Exercise - Ransomware Outbreak
• IR Tabletop Exercise - Misdirected PHI
• IR Tabletop Exercise - Lost or Stolen Device with PHI
• IR Tabletop Exercise - Transmission of Data to an Incorrect Party
• IR Tabletop Exercise - Credential Theft
• IR Tabletop Exercise - Compromised Business Partner
• Mock Malware Outbreak