Leveraging the Cloud & Managing Compliance HITRUST Alliance.

Transcription

1 Leveraging the Cloud & Managing Compliance

2 Introduction Greg Miller Principal Schellman & Company, Inc. Blake Sutherland Vice President, Enterprise Business Trend Micro

3 Agenda Cloud Increase Characteristics Deployment Type Challenges Compliance Q/A

4 The cloud services companies of all sizes The cloud is for everyone. The cloud is a democracy. Marc Benioff, CEO - Salesforce.com

5 The Increase Scalability Cost Efficiency Services Healthcare Cloud Computing Market to Reach $9.48B by 2020

6 Characteristics Broad network access Resource pooling Measured service On-demand self-service Rapid elasticity (provisioning/de-provisioning)

7 Types Public Private Community Hybrid

8 Deployment SaaS On-Demand software typically in the cloud PaaS Delivery of a computing platform and solution stack as a service IaaS Delivery of computer infrastructure (virtualization) as a services along with storage and networking.

9 Challenge: Infrastructure for improving patient health, engagement and wellness is always changing 6000 Apps in itunes Telemedicine, e-health Internet of Things Medical Devices Cloud Portals Mobile Clinician

10 Challenge: In an already complex environment New & Legacy Systems Windows XP Windows 2003 Office 365 Cloud Environments with Azure, Amazon and others Third Party / Cloud Hosted Data Center Home Health PaAent Portal Claims EHR Billing Human Resources AnalyAcs Complexity is Growing Telemedicine mhealth Internet of Things Call in the consultants!!!! Various consultants brought in due to lower IT spend PaAent Portal web app Lab EHR PaAent Portal Human Resources Pharmacy AnalyAcs Billing / Finance EHR Home Health Lab Claims PaAent Portal On-Premise Data Center Medical Devices & Video systems

11 Challenge: With Patient Data constantly in motion Enterprise data management systems, legacy and new environments, cloud .. Home users accessing their Pa=ent Portal In the doctor s EHR system Medical Devices Managing paaent data and keeping it secure along the way is of criacal importance Healthcare staff on the go, mobile devices etc. POS Systems, payment, payers, insurance Government Health Exchanges

12 Challenge: Which is valuable to criminals FiUh Annual Benchmark Study on Privacy & Security of Healthcare Data, Ponemon InsAtute, May 2015 And there are many ways to profit from this information (currently reported at selling for $50 per record): Drug fraud Create credit cards and/or use credit card information Create new identity Buy and sell prescriptions File false Medical Claims Tax fraud Bribery and ransom with embarassing health information

13 Result: a predictable outcome Breaches escalaang Medical/Healthcare: 42% of all breaches (IDRC) MulAple breaches in the last year at various healthcare organizaaons FBI: Healthcare is not prepared FDA to medical device manufacturers: Improve security Regulatory environment complex HIPAA, HITECH, PCI DSS 3.0 Healthcare organizaaons are behind in security Spend less on IT security than any other industry

14

15 The Statistics 253 breaches 112 million records 35% of the population 21% of the total number of incidents Compared to 2014, increase by 10%

16

17 Cloud Security is a Shared Responsibility Cloud User Cloud Provider Content and ApplicaAons Plaborm, ApplicaAons OperaAng System, Network & Firewall ConfiguraAon Data EncrypAon Network Traffic ProtecAon Founda=on Services Compute Storage Database Networking Global Infrastructure Domains, Availability Zones Regions Cloud providers deliver a secure infrastructure. But YOU need to protect what you pu IN the cloud your workloads.

18 Who s responsibility depends on the cloud service Source: Gartner April 2015

19 Mapping products to compliance

20 Connected Threat Defense Enable rapid response through shared threat intelligence and delivery of real-ame security updates RESPOND PREVENT Assess potenaal vulnerabiliaes and proacavely protect endpoints, servers and applicaaons Gain centralized visibility across the system, and analyze and assess impact of threats VISIBILITY & CONTROL DETECT Detect advanced malware, behavior and communicaaons invisible to standard defenses

21 Trend Micro Enterprise Security System SERVERS NETWORKS CENTRALIZED VISIBILITY & CONTROL USERS 3 rd Party SIEM, Provisioning, & OperaAonal Management Unified Dashboard User-Based Visibility SECURITY CAPABILITIES Forensics & AnalyAcs Policy Management EncrypAon & DLP AnA-Malware & Content Filtering Behavior Monitoring & Sandboxing ApplicaAon Control Intrusion PrevenAon Integrity Monitoring Response & Containment SHARED THREAT INTELLIGENCE 3 rd Party Threat InformaAon Local Threat Intelligence Threat AcAvity Recording 21 Copyright 2016 Trend Micro Inc.

22 Constantly improve our products The market leader in server security for the 6th straight year! 1 Trend Micro 30.3% A Leader in the Gartner MQ for Endpoint ProtecAon Plaborms for 13 consecuave years! #1 in protecaon and performance IDC, Server Security: VirtualizaAon and Cloud Changes Everything, January Copyright 2016 Trend Micro Inc NSS Labs Breach DetecAon Tests Trend Micro Blog, January 2015 hmp:// (Jan 2014 Aug2015 test results, Corporate SoluAons on Win XP,7, 8 Systems)

23 Audit and Assessment

24 Options

25 Questions?

26 Thank You!