
Explore healthcare cybersecurity basics, including access control, authentication, phishing and malware defenses, through the Boston Children's Hospital ransomware case, lessons on testing vulnerabilities, cyber insurance, and regulations.
Define malware and its forms—rogue software, adware, Trojan horses with back doors—and highlight Stuxnet and IoT risks to healthcare networks.
Understand ransomware and cryptocurrency, including how digital currency, wallets, ledgers, and blockchain enable ransom exchanges, with the locker analogy illustrating anonymous value transfer.
Learn how HIPAA protects health information, covering breach notification, privacy, and security rules with technical, physical, and administrative safeguards; understand common violations and penalties, including fines and potential criminal actions.
Explore how firewalls and VPNs shield health care networks, and assess vulnerabilities through hacker as a service, bug bounty programs, and cyber liability insurance to address downtime and related costs.
Hacktivists from Anonymous target Boston Children's Hospital to push a political agenda, doxxing clinicians and posting IPs, prompting intense harassment; the Pelletiere case spurred online activism and video coverage.
Boston Children's Hospital activates a response team and goes dark to mitigate a DDoS attack by Anonymous, while the FBI investigates and arrests Martin Gutfeld.
Extract lessons from a hospital case: ensure robust infrastructure, local backups, secure communications, regular security testing, and cyber insurance making cybersecurity a core hospital function.
A routine CrowdStrike update caused a global outage across Windows and cloud systems, triggering a blue screen of death and hospital delays, highlighting the need for incident response planning.
illustrates how CrowdStrike Falcon software bug caused widespread healthcare outages by compromising Windows workstations instead of Epic, and outlines phased rollouts, robust testing, and backup planning.
Explore why health care IT security attacks are rising and costly, and learn to stay vigilant, test systems like a hacker, and consider cyber insurance to protect your organization.
Celebrate your completion of the course and apply the tools and skills you learned to future endeavours.
WHEN CYBERSECURITY BECOMES REAL
Understanding the fundamentals of cybersecurity is important. But what happens when those defenses fail?
Healthcare organizations are attractive targets for cybercriminals. Malware can infiltrate systems. Ransomware can bring operations to a halt. Patient information can be compromised. And a cyberattack can quickly become much more than an IT problem—it can become an organizational, financial, and potentially patient-care problem.
This course takes you beyond the fundamentals and into the real world of healthcare cybersecurity. We'll look at the threats organizations face, how vulnerabilities are identified, the role of HIPAA, and actual cybersecurity incidents to understand what happened and what we can learn from them.
You don't need an IT or cybersecurity background. We'll tackle these subjects the same way we did the fundamentals—Plain & Simple.
WHAT YOU'LL LEARN
We'll explore some of today's most important cybersecurity threats and then connect those concepts to real-world examples.
You'll learn about:
Malware and how malicious software can compromise systems
Ransomware and why healthcare organizations are particularly vulnerable
Cryptocurrency and its connection to ransomware
HIPAA and the protection of healthcare information
Vulnerabilities and how organizations identify weaknesses before attackers do
Vulnerability and penetration testing
The cyberattack on Boston Children's Hospital
The CrowdStrike incident and what organizations can learn from it
Practical lessons from real-world cybersecurity events
Rather than simply memorizing cybersecurity terminology, you'll begin to understand how these threats develop, why they matter, and what they mean for a healthcare organization.
CYBERSECURITY—PLAIN & SIMPLE
This course is designed for healthcare professionals, managers, students, and business professionals who want to better understand cybersecurity without becoming cybersecurity specialists.
If you've completed my course Cybersecurity in Healthcare: The Fundamentals, this is the natural next step. We'll build on those foundational concepts and move into threats, vulnerabilities, and real-world incidents. If you haven't taken the first course, that's okay too—H18 can stand on its own.
My approach is practical rather than highly technical. I spent 35 years designing, developing, and bringing medical technology to market, progressing from engineering leadership to VP of Marketing and ultimately president of a healthcare IT company. I've also spent many years teaching graduate-level university courses.
My goal is to help you move beyond knowing cybersecurity terminology to understanding what cyber threats can actually mean for a healthcare organization—and what we can learn when things go wrong.