This document discusses potential security blind spots for healthcare organizations, including insider threats, partner risk, and threats from the dark web. It notes that healthcare is the only industry where insider threats outnumber external threats. It emphasizes the need to identify and mitigate these security blind spots to improve cybersecurity vision and preparedness against cyber threats targeting the healthcare industry.

1. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.
Identify and mitigate
security blind spots.
Resolve to be Ready:
Cyber threats in
Healthcare.
Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.SAMPLE ONLYSAMPLE ONLY

2. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.
Identify and mitigate
security blind spots.
Resolve to be Ready:
Cyber threats in
Healthcare.
Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.SAMPLE ONLYSAMPLE ONLY

3. Confidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 3
Potential blind spots in your
security field of vision.
Not all of the bad guys are traditional “hackers”.
Partner Risk:
How secure are the partners
connected to your network and
handling your sensitive data?
Insider Threat:
Employees behaving badly,
intentionally or through
carelessness1
Dark Web:
You can’t defend against
these threats if you don’t
look for them
2
3
Source: Verizon 2018 Data Breach Investigations Report
SAMPLE ONLY

4. SAMPLE ONLYConfidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 4
Insider threat:
Employees can cause major
damage and disruption.
Preparation
and protection
! Policies
! Logical controls
! Privileged Access
Program
! Business process
risk review
Monitoring
and response
! Detection and
incident planning
! Build vs. buy
capability challenge
13%
of incidents
are driven by
fun or curiosity
Health care is the only industry
where insiders outnumber
external threat actors

5. SAMPLE ONLYConfidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 5
Partner Risk:
Improving visibility into your
vendor ecosystem risk.
Don’t get caught off guard.
! Supply chain interruption
! Partners connected to your systems
! Vendors who process data you own

6. SAMPLE ONLYConfidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 6
The Dark Web:
A hiding place for
cyber-criminals.
! Early warning system for business-disruption
campaigns targeting your organization
! Again…build vs. buy?
! Marketplace for stolen data: customer
info and account credentials
! Invaluable/actionable insight for brand managers
Gaining visibility into the dark web is a real
challenge and it’s not a luxury.

7. SAMPLE ONLYConfidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement. 7
A prescription for improved
cybersecurity vision.
Healthcare
Who
43% external, 56% internal
What
79% medical, 37% personal, 4% payment
How
35% error, 24% misuse
! You must protect customer data–but you
don’t “have to do everything”
! Healthcare organizations have very specific
risks, threats and vulnerabilities
! Focus on security-incident probability,
not possibilities
! Find a partner who can deliver end-to-end
managed security services and advanced
detection capabilities

8. SAMPLE ONLYConfidential and proprietary materials for authorized Verizon personnel and outside agencies only. Use, disclosure or
distribution of this material is not permitted to any unauthorized persons or third parties except by written agreement.
Thank you.