Archive

All entries

Tiffany Wilson, the founder of Wilson Inclusive Solutions (WINS), a disability accessibility consulting firm, joins the Nexus Podcast to discuss the proliferation of consumer technology into healthcare infrastructure. This technology—smart speakers that help manage medications or cameras that monitor vulnerable individuals—often handles patient data and safety, and operates in a regulatory void.
Healthcare
Risk Management
Internet of Things

Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Michael Mimoso
nexuspod_joe-slowik.jpeg
Operational Resilience
Operational Technology
Internet of Things
Industrial
Healthcare
Cyber Resilience
Risk Management

Nexus Podcast: Joe Slowik on Securing Exposed Internet-Facing Assets

Michael Mimoso
On this episode of the Nexus Podcast, Health-ISAC VP of Medical Device Cybersecurity Phil Englert discusses the cybersecurity risks introduced by legacy technology in healthcare and how it impacts patient care and safety. He also brought context and insight into the U.S. Food and Drug Administration's (FDA) updated guidance on cybersecurity requirements for medical devices aimed at manufacturers and premarket product submissions.
Healthcare
Cyber Resilience
Vulnerability Management
Risk Management
Technical Debt

Nexus Podcast: Health-ISAC's Phil Englert on Medical Device Cybersecurity

Michael Mimoso
ASL Roma 1 CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli explain the next evolution of cybersecurity and risk governance at Italy’s largest public health authority: canonical risk. The hospital's HOPE framework is the decision layer for this concept, a governed, explainable, and auditable synthesis of technical signals, operational context, and explicit priority logic that inform remediation and mitigation actions.
Healthcare
Cyber Resilience
Operational Resilience
Risk Management

At ASL Roma 1, Canonical Risk Informs Governance, Remediation Actions

Stefano Scaramuzzino
Fabio Battelli
At Nexus 2025, we sat down with Bruno Carvalho, IT manager for the Hospital Felicio Rocho in Belo Horizonte, Brazil, who describes the need to achieve greater granular visibility, ensuring the integrity of all aspects encompassing hospitals and the healthcare sector as a whole.
Healthcare
Operational Resilience
Nexus Conference
Cyber Resilience

Bruno Carvalho on How Visibility Enables Healthcare Cybersecurity

At Nexus 2025, we sat down with Bruno Carvalho, IT manager for the Hospital Felicio Rocho in Belo Horizonte, Brazil, who describes the need to achieve greater…
Michael Mimoso
nexus_stifel-offensive-sec.jpg
Risk Management
Operational Resilience
Cyber Resilience
Federal
Healthcare
Industrial

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

Megan Stifel
nexus-vid_debora-boriel.png
Nexus Conference
Healthcare
Cyber Resilience
Risk Management

Debora Borel on IT/OT Convergence in Hospitals

In this interview from Nexus Conference 2025, Debora Borel, Cyber Security Coordinator, Einstein Hospital Israelita in Sao Paolo, Brazil, explains how the…
Michael Mimoso
Cyber-physical systems cybersecurity is a maturing practice, which means protection of these critical systems must become more programmatic. Stefano Scaramuzzino CISO of ASL Roma-1 and Fabio Battelli of Deloittte explain the first steps on this journey using ASL Roma-1's HOPE program as the model.
Cyber Resilience
Healthcare
Operational Resilience
Risk Management

Moving from Visibility to Governance of CPS

Fabio Battelli
Stefano Scaramuzzino
Adam Jurgensen, Medical Device Security Engineer at Valley Health Systems, brings us inside the roles and responsibilities of those experts overseeing connected devices inside healthcare organizations. Jurgensen describes the restrictions his role faces when it comes to updating and patching connected medical devices, the gamut of which may run from MRIs, CT, ultrasounds, to patient monitors, and defibrillators. Compensating controls, segmentation, and other cybersecurity strategies are key for keeping devices secure and patients safe in the event of an incident.
Nexus Conference
Healthcare
Vulnerability Management
Risk Management
Cyber Resilience

Adam Jurgensen on Medical Device Cybersecurity

Adam Jurgensen, Medical Device Security Engineer at Valley Health Systems, brings us inside the roles and responsibilities of those experts overseeing…
Michael Mimoso
Leandro Ribeiro, Security Manager of Hospital Sírio Libanês, explains how patient care is intrinsically linked to protecting all the medical devices and equipment used in their treatment. Ensuring the security of all associated processes, and preventing vulnerabilities that could compromise patient integrity and safety are the key.
Nexus Conference
Healthcare
Risk Management

Leandro Ribeiro Sobre Segurança de Dispositivos Médicos e Cuidado com o Paciente

Leandro Ribeiro, Security Manager of Hospital Sírio Libanês, explains how patient care is intrinsically linked to protecting all the medical devices and…
Michael Mimoso
ASL Roma 1, a public health provider in Rome, has distinguished itself in the global healthcare landscape over the past two years by implementing advanced cybersecurity strategies, moving toward a hyper convergent security model, the so-called HyperSOC, in response to the growing cyber attacks in the global healthcare sector.
Healthcare
Risk Management
Cyber Resilience

Nexus Reflections and Predictions: Stefano Scaramuzzino

Stefano Scaramuzzino
Congress' failure to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA 2015) signals a fundamental shift in threat intelligence sharing and overall risk management strategies.
Vulnerability Management
Risk Management
Cyber Resilience
Industrial
Healthcare
Internet of Things

CISO Survival Guide: 4 Steps to Prepare for CISA 2015 Expiration

George V. Hulme
Latest on Nexus Podcast