Cybersecurity Awareness Month: Securing Internet-Connected Devices in Healthcare  The healthcare industry is increasingly relying upon internet-connected devices and solutions to improve patient care, organizational efficiency, speed of crisis response, and much more. The emergence of telemedicine, digital health records, internet-connected medical devices, patient wellness apps, and an increasing amount of third parties entering the health supply chain has created many benefits, but has also exposed the industry to vulnerabilities that cyber criminals regularly attempt to exploit. Last week's Cybersecurity Awareness Month blog highlighted Julie Haney's, Ph.D., lead for the NIST Usable Cybersecurity Program, suggestions for users and organizations to protect internet-connected devices for both personal and professional use. Now the third week of Cybersecurity Awareness Month will delve into the industry (hospitals, care facilities) and consumer (telemedicine patients), implications of internet-connected device use, and what steps both can take do their part and #BeCyberSmart. Job title/background – how did you end up at NIST working on privacy? I am an IT Security Specialist. I joined NIST in 2012 through a clerical staffing program and was not quite sure where the opportunity would lead my career. With a B.S. in Criminal Justice, I wanted to bridge my education and knowledge of the legal system with a career in technology, policy, and privacy. While working in a lead administrative role at NIST, I attended and completed my M.S in Information Technology/Information Assurance. While in graduate school, I became really interested in data protection, cybersecurity risk management, and how both elements play a critical role in protecting and safeguarding critical infrastructure, individuals' privacy, and sensitive data. Privacy is important to me because losing control of one's sensitive personal information can cause devastating consequences, so protecting my privacy is a huge responsibility that I take on every day. In 2018, I started working as an IT Security Specialist in the Privacy Engineering Program, where I support the development of privacy risk management best practices, guidance, and communication efforts. I also perform website development functions for the team. I lead Supply Chain Assurance project efforts at the National Cybersecurity Center of Excellence (NCCoE) and work with teams there on privacy integration and collaboration efforts. | 
No comments:
Post a Comment