Healthcare cybersecurity assessment and roadmap

To address the challenges that this organization faced, Nortal employed the following strategies:

1. Analysis of existing information: Nortal analyzed the existing vulnerability and risk information already in possession by the healthcare provider.
2. External OSINT reconnaissance: Conducted external Open-Source Intelligence (OSINT) reconnaissance to gain a broader perspective on potential threats. Activities included identification of existing vulnerabilities within publicly available assets, research for leaked information available in the dark web as well as mapping of most active threat actor groups and common vectors of attack within the health domain.
3. Risk landscape definition: Defined the overall risk landscape for the company, considering various internal and external factors.
4. Business context and value mapping: Mapped the business context and value to vulnerable assets to establish a clear foundation for prioritizing efforts and estimating the required resources.
5. Mapping existing initiatives: Mapped current enhancement initiatives to vulnerabilities and priority areas to ensure alignment with the new strategy.

1. Identification and prioritization of vulnerabilities and gaps: The most significant vulnerabilities, gaps and vulnerability clusters were identified and prioritized, focusing on those posing the highest risk.
2. Actionable recommendations: Specific recommendations for actions were defined and prioritized based on estimated risk impact and time to value and were categorized into urgent actions, tactical actions, strategic actions.
3. Strategic roadmaps: The strategic roadmaps for implementation were created that included existing enhancement initiatives and additionally recommended actions addressing all high and medium risk vulnerabilities and well as increasing overall organizational cybersecurity posture and resilience.
4. Incident response preparation: Incident response scenarios were prepared for tabletop exercises, emphasizing the identified gaps and the overall risk landscape. This preparation was aimed at enhancing the organization’s readiness to respond to potential cyber incidents.

Through a structured and comprehensive approach, Nortal helped the healthcare provider achieve a clearer understanding of their current cybersecurity state. The prioritized roadmap and strategic recommendations provided a solid foundation for mitigating immediate and short term risks and enhancing the organization’s overall cyber resilience. This demonstrates the importance of a unified view and strategic alignment in effectively managing cybersecurity in large, complex organizations.