The client is a well-known and leading Nebraska-based hospital and healthcare network. As a company in the healthcare ecosystem, this organization is subject to HIPAA regulations and compliances and thus, we had to ensure that personal health information (PHI) is secured at all costs with appropriate and robust protection across all data points and endpoints.

The hospital lacked a dedicated Chief Information Security Officer (CISO), whereas its IT Team was stuck in a time warp juggling between multiple duties: network issues, printer issues, patches, password resets, system upgrades, etc. Security took a backseat! In addition, the IT team lacked a sound understanding of the compliances coupled with lack of communication between board and the IT team. The hospital neglected basic cybersecurity hygiene and failed to prioritize cybersecurity and employ the right security skills and layers.

The hospital faced multiple challenges prior to collaborating with Futurism:

• The hospital struggled to identify potential cyber threats and cybersecurity practices
• Multiple branches connected through VPN with Central Gateway (Firewall)
• Complex network with multi-tier switching and segments
• 300+ unsecured end users, 100 Servers, 300 Endpoints, 50 Printers, 10 Applications, and 20+ Network Devices (Firewalls, Routers and Switches)
• Lack of robust endpoint security, data protection policies, email and web security
• Improper Network Settings, Firewall Misconfigurations and End-of-Life assets
• Lack of security processes to manage IT Infrastructure/asset
• Lack of a skilled incident response team trained in cyber forensics and high-tech investigations