Mitch Parker

Phil Curran - Cooper University Health Care, John Houston - University of Pittsburgh Medical Center, Mitch Parker - Indiana University Health System • •

Breaches in Healthcare: Why? Why? Why?

Archived Session •

In the beginning, many reported health data breaches involved missteps, such as the theft of laptops or inappropriate access to records by insiders. Today, however, healthcare organizations are also frequent targets for attacks from nation-states looking for intellectual property or patient information as well as...

Start this Session

Geoff Fisher - PricewaterhouseCoopers, John Halamka - Beth Israel Deaconess Medical Center, Jigar Kadakia - Partners HealthCare, Mitch Parker - Indiana University Health System • •

Developing a Comprehensive Security Program and Creating a "Culture of Security"

Archived Session •

Typically the traditional Healthcare Information "culture" has not been managed or even significantly influenced by centralized IT or InfoSec personnel. The current environment can be heavily fragmented into various functional and geographic groups, each with very different governance programs and priorities which...

Start this Session

Preparing for and Passing an OCR HIPAA Audit

Archived Session •

Kate Borten - The Marblehead Group, Mitch Parker - Indiana University Health System • •

The HHS Office for Civil Rights' much-delayed resumption of its random HIPAA compliance audit program is expected in the coming months. So now is the time to prepare. This session will cover the highest priority tasks that should be started immediately if not already underway to help lay the groundwork for a...

Start this Session

How to Stop Worrying and Love the Cloud; Leveraging Cloud Services While Maintaining Security and Compliance

Archived Session •

William Hudson - VMware, Mitch Parker - Indiana University Health System • •

Mention cloud services to healthcare IT insiders and responses will vary from caution and trepidation to earnest interest. The advantages of low cost, on-demand cloud-based services are clear. However, managing their use and matching an organization's developmental, compliance and risk requirements to the right...

Start this Session

Please fill out the following fields
(All fields required):

Subscription Preferences:

CyberEd

CISO, Indiana University Health System

Parker is CISO at University of Indiana Health, based in Indianapolis. He formerly served as CISO at the four-hospital Temple University Health System as well as CISO for Temple's clinical faculty practice plan, Temple University Physicians. Previously, he was an information security consultant to the Defense Logistics Agency and others.

View all sessions by Suzanne Schwartz, MD

Suzanne Schwartz, MD

Director, Office of Strategic Partnerships and Technology Innovation (OST), FDA’s Center for Devices & Radiological Health (CDRH)

Suzanne B. Schwartz, MD, MBA is the Director of the Office of Strategic Partnerships and Technology Innovation (OST) at FDA’s Center for Devices & Radiological Health (CDRH). Suzanne’s work in medical device cybersecurity includes raising awareness, educating, outreach, partnering and coalition-building within the Healthcare and Public Health Sector (HPH) as well as fostering collaborations across other government agencies and the private sector. Suzanne has been recognized for Excellence in Innovation at FDA’s Women’s History Month for her work in Medical Device Cybersecurity. Together with Health Canada, Suzanne has represented FDA in co-chairing the International Medical Device Regulators Forum (IMDRF) Work Group on Medical Device Cybersecurity leading to its first international guidance publication in March 2020. She chairs CDRH’s Cybersecurity Working Group, tasked with formulating FDA’s medical device cybersecurity policy and has additionally served as co-chair of the Government Coordinating Council (GCC) for the HPH Critical Infrastructure Sector, focusing on the sector’s healthcare cybersecurity initiatives. Suzanne earned an MD from Albert Einstein College of Medicine; an executive MBA from NYU Stern School of Business, completed Cohort X of the National Preparedness Leadership Initiative – Harvard School of Public Health & Harvard Kennedy School of Government executive education, and earned in September 2018 a certificate of mastery for completion of requirements at the Federal Executive Institute – Leadership for a Democratic Society.

Rob Suárez

VP, CISO, Becton, Dickinson and Company

Rob Suárez is a cybersecurity and privacy professional in the medical device and healthcare IT industry. At BD, Rob serves as Chief Information Security Officer and oversees cybersecurity across the company’s enterprise, IT and manufacturing systems. Rob currently chairs the Cybersecurity Steering Committee for the Medical Device Innovation Consortium and the Cybersecurity Working Group for AdvaMed. He was also one of three leaders to co-chair the public-private Healthcare and Public Health Sector Coordinating Council (HSCC) Med Tech Cybersecurity Risk Management Task Group that issued the seminal Medical Device and Healthcare information Technology Joint Security Plan (JSP) in 2019.

View all sessions by Rob Suárez

Joey Johnson

CISO, Premise Health

Johnson, CISO of Premise Health, Brentwood, Tenn., has more than 15 years of cybersecurity experience. Premise Health was formed as a result of the merger of Take Care Employer Solutions - a former subsidiary of Walgreen Co. - and CHS Health Services. Johnson formerly served as chief security officer for the U.S. Department of Commerce - Office of Computer Services, and held various security and network architecture roles leading the design and implementation of complex enterprise networks for airports, hospitals, universities and federal agencies.

View all sessions by Joey Johnson

Mitch Parker

CISO, Indiana University Health System

View all sessions by Cris Ewell

Cris Ewell

CISO, UW Medicine

Ewell, PhD, is CISO at University of Washington Medicine. Previously, he was CISO of Seattle Children's Hospital. Before that, he served as the director of information security operations at the University of Washington, chief security officer for PEMCO Corp. and chief technology officer for Breakwater Security.

Mitch Parker

CISO, Indiana University Health System

View all sessions by Jennings Aske

Jennings Aske

CISO, New York-Presbyterian

Aske is the CISO for New York-Presbyterian. Prior to this he was VP Information Security & Chief Security Officer of Nuance Communications as well as Chief Information Security and Privacy Officer of Partners HealthCare. Prior to Partners, Aske was the Chief Information Security Officer for UMass Memorial Hospital. Aske was also the Chief Information Security Officer for the Commonwealth of Massachusetts's Executive Office of Health and Human Services, responsible for coordinating information security across the 16 state agencies. Aske is a licensed attorney in the Commonwealth of Massachusetts.

Mitch Parker

CISO, Indiana University Health System

View all sessions by Phil Curran

Phil Curran

CISO, Cooper University Health Care

As the Chief Information Assurance and Privacy Officer at Cooper University Health Care in Camden NJ, Phil Curran is responsible for managing governance and regulatory compliance, risk assessment and management, threat intelligence and vulnerability assessment, privacy and security investigations, business continuity, and awareness and training. He has served on the Health Information Trust Alliance (HITRUST) task force to integrate privacy controls in the Common Security Framework and the development of the ISC2 Health Care Information Security and Privacy Practitioner. Phil serves on the Executive Committee for Secure World - Philadelphia and the Philadelphia and New Jersey Chapters of the CISO Executive Network. He has spoken on Information Security and Privacy issues at Secure World and HIMSS Privacy and Security.

Mark Eggleston

VP, CISO and CPO, Health Partners Plans

Eggleston is vice president, CISO and chief privacy officer at Health Partners Plans, a Philadelphia-based HMO. He leads the maturation of various security technologies and privacy initiatives and manages a business continuity and disaster recovery program. Eggleston started his professional career serving as a program manager and psychotherapist at a hospital serving children and adolescents. Later, he helped develop a HIPAA privacy and security compliance program for a geographically dispersed healthcare provider organization and later at a local health plan, before moving to his current role.

View all sessions by Mark Eggleston

Brian Lancaster

VP of IT and CIO, University of Nebraska Medical Center

Brian Lancaster currently serves as Vice President of IT and CIO at the University of Nebraska Medical Center. A healthcare technology executive with over 20 years of experience, he provides vision, direction, coordination and oversight of the delivery of the highest quality information technology to the enterprise. Technology that is critical to deliver upon Nebraska Medicine and UNMC's shared mission statement to lead the world in transforming lives to create a healthy future for all individuals and communities through premier educational programs, innovative research and extraordinary patient care. Lancaster joined Nebraska Medicine in 2015 and during his tenure at Nebraska Medicine, he has lead the enterprise's technology strategy to achieve HIMSS Level 7 in 2015, as well as led the organization to be awarded the 2017 Most Wired award and the 2017 HIMSS Enterprise Davies award. Prior to joining Nebraska Medicine, he was employed by Cerner Corporation where he was the executive over the product and business strategies for Cerner's Electronic Medical Record and Population Health product lines. Lancaster is a recognized innovator with 7 inventions awarded patents and an additional 12 inventions awaiting patent approval.

View all sessions by Brian Lancaster

Mitch Parker

CISO, Indiana University Health System

View all sessions by Steven Teppler

Steven Teppler

Attorney; Bitcoin/Blockchain Expert, Mandelbaum Salsburg P.C.

Teppler has practiced law since 1981 and now leads the firm's electronic discovery and technology based litigation practice. His practice focus is on electronic discovery, including production, preservation, and spoliation matters, and he advises clients about risk, liability, and compliance issues unique to information governance. His experience includes litigation matters, both against and on behalf of Fortune 500 companies, as well as probate and family law disputes where electronic discovery is critically implicated. Nationally, Teppler is the Co-Chair of the American Bar Association's IoT Committee, a member of the Seventh Circuit Court of Appeals Electronic Discovery Pilot Program, a founder and co-chair of the American Bar Association's IoT National Institute as well as the American Bar Association's National Institute on Electronic Discovery and Information Governance, and a contributing author of the ANSI X9F4 trusted timestamp guideline standards for the financial industry. Steven holds six patents in the field of content authentication and is the founder and CEO of a content authentication provider.

Vikrant Arora

CISO, Hospital for Special Surgery

Vikrant Arora is a credentialed business leader with more than 15 years of experience in developing enterprise security and risk management programs in the healthcare, government and education sectors in North America and Asia. In his former role as the assistant vice president and chief information security and risk officer at NYC Health & Hospitals, an integrated system of 11 hospitals, clinics, nursing homes and home care in New York City, Arora is focused on security strategy, business risks, regulatory compliance and securing clinical systems as well as biomedical devices.

View all sessions by Vikrant Arora

Marianne Kolbasuk McGee

Executive Editor, HealthcareInfoSecurity, ISMG

McGee is executive editor of Information Security Media Group's HealthcareInfoSecurity.com media site. She has about 30 years of IT journalism experience, with a focus on healthcare information technology issues for more than 15 years. Before joining ISMG in 2012, she was a reporter at InformationWeek magazine and news site and played a lead role in the launch of InformationWeek's healthcare IT media site.

View all sessions by Marianne Kolbasuk McGee

Mitch Parker

CISO, Indiana University Health System

View all sessions by Iliana Peters

Iliana Peters

Shareholder, Healthcare Security, Polsinelli

Iliana Peters currently serves as a shareholder at Polsinelli, charged with championing healthcare security on behalf of the firm. She previously served as the Acting Deputy Director of Health Information Privacy at the Department of Health and Human Services' Office for Civil Rights. In this role, she is the national lead for OCR enforcement of the HIPAA Rules, and works closely with OCR's ten regional offices to promote compliance with and enforcement of the HIPAA Rules. Additionally, Peters supports many other OCR policy and outreach initiatives, including rule-makings, compliance initiatives with other federal agencies, and training, including of the State Attorneys General. Prior to joining the team in D.C., she worked as an investigator in Region VI in Dallas, Texas. Prior to joining OCR, Peters worked in private practice in Texas.

Anahi Santiago

CISO, Christiana Care Health System

As Christiana Care Health System's Chief Information Security Officer, Anahi Santiago is charged with providing strategic direction and oversight to a comprehensive security program, policy development, standards and controls implementation, training and awareness, regular risk assessment and mitigation, as well as partnerships with internal and external auditors. She also regularly collaborates with state and federal regulatory bodies and actively contributes to proposed state and federal regulations that govern privacy and information security. Before joining Christiana, Santiago provided similar support for the Albert Einstein Healthcare Network at a director level.

View all sessions by Anahi Santiago

Phil Curran

CISO, Cooper University Health Care

View all sessions by Phil Curran

John Houston

Esq Vice President, Information Security and Privacy; Associate Counsel, UPMC

Houston is vice president, information security and privacy, and associate counsel for University of Pittsburgh Medical Center, an $11 billion health system. At UPMC, Houston handles such issues as privacy, information security and legal matters associated with the acquisition, licensing and use of technology. He is an adjunct assistant professor in the department of biomedical informatics at the university's school of medicine.

View all sessions by John Houston

Mitch Parker

CISO, Indiana University Health System

View all sessions by Geoff Fisher

Geoff Fisher

Director Cybersecurity & Privacy, PricewaterhouseCoopers

Fisher is a Director in PwC's US Advisory practice focused on delivering security, privacy, strategy, and infrastructure services to Provider, Payer, Pharmaceuticals and Life Sciences clients. With over 15 years of professional experience, he is an accomplished technology leader with a demonstrated record of delivering solutions to help clients manage their cybersecurity and business risks while achieving their organizational objectives. Fisher has led initiatives both domestically and internationally including a range of IT due diligence assessments, acquisition integrations, application and infrastructure strategy developments/deployments, and information security strategies. He holds a BA from Boston University in Economics and International relations. Her is a Certified Information Systems Auditor (CISA) and a Certified HITRUST Practitioner (CCSFP).

John Halamka

CIO, Beth Israel Deaconess Medical Center

Halamka is Chief Information Officer of Beth Israel Deaconess Medical Center. He also has had roles as Professor of Medicine at Harvard Medical School, Chairman of the New England Healthcare Exchange Network (NEHEN), co-Chair of the national HIT Standards Committee, co-Chair of the Massachusetts HIT Advisory Committee and a practicing Emergency Physician. As Chief Information Officer of Beth Israel Deaconess Medical Center, Halamka is responsible for all clinical, financial, administrative and academic information technology serving 3000 doctors, 14000 employees and two million patients. As Chairman of NEHEN he oversees clinical and administrative data exchange in Eastern Massachusetts. As co-Chair of the HIT Standards Committee he facilitates the process of electronic standards harmonization among stakeholders nationwide. As co-Chair of the Massachusetts HIT Advisory Committee, he engages the stakeholders of the Commonwealth to guide the development of a statewide health information exchange.

View all sessions by John Halamka

Jigar Kadakia

CISO & CPO, Partners HealthCare

Kadakia has more than 17 years of information security experience across multiple industries, with a focus on health care delivery and projects such as HIPAA/HITECH assesments, Meaningful Use assessment, ICD-10 releted implementations, privacy program assessments and implementations, IT internal audit, and business associate risk management. Kadakia has spoken at many security and privacy forums/roundtables/conferences, and is a leader in the health care information security and privacy space. He has a Bachelor of Science degree in Chemical Engineering from the University of Cincinnati and a Master in Business Administration from Xavier University. He is CISSP, CIPP and HITRUST Certified. He is also certified in Risk and Information System Controls.

View all sessions by Jigar Kadakia

Mitch Parker

CISO, Indiana University Health System

View all sessions by Kate Borten

Kate Borten

President, The Marblehead Group

Borten, founder of The Marblehead Group, provides her clients with expertise in security, privacy, and health IT from over 20 years inside the healthcare industry. In the 1990s she led the enterprise-wide security program at Massachusetts General Hospital; and as Chief Information Security Officer, she established the first information security program at Beth Israel Deaconess Medical Center and CareGroup in Boston. Borten is a nationally-recognized expert on HIPAA and health information privacy and security, a frequent speaker on these topics, and author of tools and books including HIPAA Security Made Simple (HCPro 2013). The Marblehead Group, founded in 1999, provides HIPAA privacy and security risk assessments, compliance auditing, training, and solutions to the healthcare industry. Clients include the full range of providers, health plans, and business associates.

Mitch Parker

CISO, Indiana University Health System