"Key Tools to Combat Cyber Security Threats" presented on September 9, 2016, at ComEd's Accelerate Tech by Erik Devine, Chief Information Security Officer for Riverside Healthcare in Kankakee, Illinois. Accelerate Tech was held at Olivet Nazarene University in Bourbonnais, Illinois, and hosted by the Economic Alliance of Kankakee County, ONU Walker School of Engineering and Kankakee County Chamber of Commerce.

1. Key Tools to Combat
CyberSecurity Threats
Erik J. Devine, CISO
Riverside Healthcare

2. Expectations and
Disclosures
These “tools” will not guarantee you from being
hacked or having a data breach
No vendors will be promoted or criticized
Please make comments, or ask questions during
presentation.
Someone in this audience is having a breach right
now, and probably doesn’t know it, hopefully that
someone is not me…..

3. 2016 State of Cybersecurity
Only 40% of businesses can handle simple attacks
74% of businesses expect to be affected by an attack
30% of businesses see a phishing attack at least
once a day
About 25% of business don’t know that their
credentials were stolen, who stole them, or how they
were used

4. The Bad and The Good
1.02 Billion Data Records were stolen in 2014
707.5 Million Data Records were stolen in 2015
867 Million Data Records stolen so far in 2016 (Jan-Aug)
This equates to 42 records stolen per second.
Cost of a record being breached?
$158 / record

5. Breaking the Tools Down

6. Breaking down Security and Privacy
ComplianceTechnology
Awareness
RelationshipStrategic Planning

7. Key Technology Tools
Firewalls - Create Segregation with UTM Services
Endpoint Security
Application Control (Endpoint and Edge)
Patch Management
Security Event Information Management
Email Encryption, SPAM and A/V
Full Disk Encryption
Device Management
Sandboxes / File Integrity Checking

8. Key Compliance Tools
Updated Policies and Procedures, Cybersecurity
Frameworks
3rd Party review of Policies, Procedures and Technology
Regulated business making sure they are up on today’s
audits and reviews.
Knowing where your data is at, and who has access to it:
inside and outside your organization
Risk Assessments is key
Incident Response Planning and Testing

9. Key Awareness Tools
Information Security Reporting Structure
Social Engineering Tests
Yearly Tests for Employees
Community Events / Conferences
Report to Department Meetings and Key Staff
Members

10. Key Strategic Planning Tools
Security Feeds from the Internet
Government Security Officials (FBI, DHS, DOD)
Peers and Social Networking
Monitor trends within your own industry and
community
Learn how to fail fast
Focus on Information Technology and Workflow
Focus on other Department needs and strategies

11. Key Relationship Tools
Culture is everything, don’t try to change the world in
7 hours or less
Speak to key personnel (board, management, staff)
in their language
Transparent Communication is key
Empower your staff and peers
Empower the employee to help you. I try have 3000+
employees act as my Security Analysts.

12. Any Questions, Comments, Insults, or Need For
Resuscitation?