Episode 9 - Playing Russian Roulette: Are Planning to win? with Heather Costa

In this episode of The Buzz, host Mike Mosquito and co-host Maureen Nylin, discuss the topic of cyber resilience with guest Heather Costa, Director of Technology Resilience at Mayo Clinic. They explore the concept of cyber resilience and its importance in the healthcare industry, particularly in the face of increasing cyber attacks. Heather emphasizes the need for organizations to be prepared to respond and recover effectively from technology disruptions, and highlights the importance of building an architecture that allows for scalability and adaptability. The conversation also touches on the role of training, the evaluation of cybersecurity vendors, and the need for organizations to have a clear understanding of their priorities and a plan for mitigating the impacts of disruptions.

Takeaways

Cyber resilience is the ability to respond and recover effectively from technology disruptions, particularly in the face of cyber attacks.

Healthcare organizations are a prime target for cyber adversaries, making cyber resilience a crucial focus.

Resilience is about mitigating the impacts of disruptions rather than preventing them entirely.

Training and awareness programs should be intentional, focused on clear goals, and regularly evaluated for effectiveness.

Choosing the right technology solutions for cyber resilience requires a comprehensive understanding of an organization's specific needs and goals.

Business associate agreements should be thoroughly evaluated to ensure that partners and vendors are meeting cybersecurity requirements.

The success of cyber resilience is often invisible, as it is measured by the absence of significant impacts or disruptions.

Organizations should start their journey towards cyber resilience by identifying their priorities and continuously improving their strategies and processes.

Chapters

00:00 Introduction and Importance of Cyber Resilience

03:18 The Need for Frequent Conversations on Cyber Resilience

05:17 Strategies and Key Components for Cyber Resilience

08:09 Evaluating the Preparedness of Hospitals and Hackers' Sophistication

10:17 The Importance of Training and Continuous Improvement

14:29 Choosing the Right Technology Solutions for Resilience

18:28 Evaluating Business Associate Agreements

22:09 Real-World Examples of Cyber Resilience

27:23 Addressing Mistakes and Starting the Journey Towards Cyber Resilience