Enabling Visibility & Orchestrating Collaboration
Comprehensive Operations and Risk Solutions for Connected Healthcare Devices and Data
01Layer
Visibility and Integration
Inventory, calculate risk, and prioritize
02Layer
Operationalize
Data-driven action plan to mitigate risk
03Layer
Govern
Security and privacy vigilance through policy, people, and lifecycle management
-
Medical and IoT Device Risk Connected Asset Risk Management and Assessment -
Connected Asset Visibility Real Time Inventory and Continuous Asset Monitoring -
Asset and Data Governance IoT, Medical Device and Electronic Health Information -
Privacy and Security Policy Essential Regulatory, Legal and Data Exchange Insight -
Enabling Secure Interoperability Optimizing Integration of Devices and Data -
Workforce Development: Advancing Privacy and Security Knowledge
Framework Objectives and Activities
Asset Risk Management Program Services
Seeking Market Awareness
Connected Asset Risk Framework
- Webinars
- Speaking Engagements
- Policy and Regulatory interpretation
- White papers
- CISO to CISO
- Executive brief
- Education
Organizational Readiness
Connected Asset Risk Framework
- Human factor best practice
- Risk assessment artifacts
- Roles and responsibilities
- Clinical Engineering and IT Security collaboration
- Security program integration preparation
- Budget guidance
- Total cost of ownership
Requirements Analysis and RFP/System Selection
Connected Asset Risk Framework
- Vendor awareness/partnerships
- Selection criteria
- Scoring guide
- Market and product evaluation / comparison / analysis
Preparedness and Implementation
Connected Asset Risk Framework
- Network and infrastructure
- Project documentation
- Kick-off meeting
- Team development and collaboration
- Connected asset data collection
- Connected asset data integration
Device Visibility and Integration
Connected Asset Risk Framework
- Inventory connected assets
- Identify security vulnerabilities
- Calculate risk to device and organization
- Develop near term action plan to address critical vulnerabilities
- Develop short term budget to address mission critical remedies
- Integration to leverate existing security investments
- Mitigate false positives
Operationalize and Prioritize Risk Mitigation
Connected Asset Risk Framework
- Organizational security posture
- Develop mature connected asset security program
- Network segmentation report and recommendation
- Develop data driven medical device strategy and security program
Security Operations Integration
Connected Asset Risk Framework
- Policies
- Develop / establish governance
- Education
- Inventory and vulnerability reporting
- Dashboard and risk report dashboard development
- Roadmap for connected asset management and planning
Enhance Governance
Connected Asset Risk Framework
- Incident management
- Organizational security product assessment and recommendations
- Integration into existing security program
- Reduce alarm fatigue via security integration program
Continuous Operations
Connected Asset Risk Framework
- Management contract
- Virtual support
- Cross training
- Affordability
- Board interaction and reporting
- Security reporting and metrics
- Operational review / consulting
- 24×8 NOC / SOC solutions
- SecOps (Security Operations)
Asset Efficiency and Risk Program Experts
Randy Bailey
Co-Founder and Chairman
Co-Founder and Chairman, Randy brings 34 years of HIT leadership, security program development, and risk management knowledge in partnership with our clients.
Toby Gouker, Ph.D.
VP and CISO
Toby brings 31 years of cybersecurity education, framework knowledge, and Medical Device/IoT leadership to First. He has extensive security policy experience for healthcare entities.
Carter Groome
Co-Founder CEO
Co-Founder and CEO of First, Carter brings 25 years of HIT, management consulting, health policy, and security leadership experience to our clients.
Jack Wagner
VP of Advisory Services
Jack is the VP of Advisory Services for First with 32 years of Medical Device/IoT Security and Technology Services leadership. Jack leads First's Guardian Program Team.
First Highlights
Asset Risk Management
Program Solutions Unique to Your Healthcare Environment
Operational Efficiency
Expense Remediation and Risk Reduction
The Internet of Things
Reasonable security best practices for Healthcare IoT Devices
Behavioral change programs have an enormous impact in reducing human factor risk
“If I had to make a choice about the one thing to spend money on, it would be about getting the word out, talking to people and training people about the risks.” – Health System CISO
Who We Work With
Copyright © 2020 First Choice Professionals, LLC. All rights reserved.