The webinar provided strategies for hospitals to prepare for and respond to ransomware attacks. It discussed the importance of education and communication, as well as technical prevention methods like firewalls, device control, application whitelisting and backups. The webinar was presented by representatives from HospitalPortal.net, who discussed communication strategies, and IntelliSuite IT Solutions, who covered technical prevention and response best practices.
dehradun Call Girls 👙 6297143586 👙 Genuine WhatsApp Number for Real Meet
HOW TO PREPARE FOR AND RESPOND TO A RANDSOMWARE ATTACK [Webinar]
1. Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
How to Prepare for and Respond to a
Ransomware Attack
Presented by
HospitalPortal.net + IntelliSuite IT Solutions
Presented by:
Albert Jurkiewicz, CEO, HospitalPortal.net
Peter Ayedun, President, IntelliSuite IT Solutions
Anne La Francis, Director of Sales and Marketing, HospitalPortal.net
2. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Webinar
Duration: Approximately 45 min
Open forum at the end
Your Presenters
Albert Jurkiewicz - CEO, HospitalPortal.net
Peter Ayedun – President, IntelliSuite IT
Solutions
Anne La Francis - Director of Sales &
Marketing
Agenda and Goals
HospitalPortal.net will focus on . . .
The strategy for proper
communication and education of
staff in case of a Ransomware
Attack.
IntelliSuite IT Solutions will focus on . . .
The technical strategy for
preventing and responding to a
Ransomware Attack.
Session Agenda
3. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
About HospitalPortal.net
Software development company located in a
suburb of Chicago
We specialize in out-of-the box, healthcare-
specific Intranets and policies and procedures
management solutions.
We support over 150,000 daily users across
175 hospitals throughout the US, as well as
large health networks like HCA, Prime
Healthcare, Cook County Health, NCH &
CentroMed.
4. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
What makes a complete Ransomware Attack plan?
Threat Preparedness (Prevention)
Non-IT aspects
Technical aspects
Attack Response (Action)
Non-IT aspects
Technical aspects
5. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Threat Preparedness
Communication
Must have a centralized, mass communication
tool in place
Connect to community
Create Awareness on the topic
Staff awareness and IT staff awareness
Provide ways to Engage Staff
Develop a strategy for engaging staff to think
proactively about IT and patient privacy
What does it take to be Ready?
6. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Threat Preparedness cont’d
Educate everyone and maintain accountability!
Proper employee education
Staff education
IT staff education
Vendor security management
Publish important documents around IT security
Keep staff accountable
7. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Attack Response
You have a plan, now follow it!
Communication & alerts
Incident response team pages
Ongoing updates
Staff or Resource Scheduling
8. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Attack Response cont’d
Maintain control over the situation
How-to Resources
Action Sheets
Chain of Command
Track, monitor and report on response actions
Proactive technical planning throughout attack
Management dashboards
9. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Real life Examples
HospitalPortal.net Intranet and
Policies and Procedures Solution
Live DEMO for Emergency
Preparedness and Response
10. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
About IntelliSuite IT Solutions
HQ in Schaumburg, IL. / Offices in KY
Managed IT and Consulting Services
Over 80% of Clients in Healthcare
HIPAA Compliance / Healthcare IT
Citrix Consulting Services
Consulted for some of the largest
healthcare institutions in the US –
including Sutter Health, LSU Medical
Center, University of Chicago Medical
Center, UIC Medical Center, etc.
11. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Technical Aspects of a Ransomware Attack Plan
Ransomware Overview
Preventing Ransomware Attack
Responding to Ransomware Attack
12. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Ransomware Overview
Why Ransomware?
Make money for its creators
Explores Vulnerabilities - Firewalls, Web
Surfing, Emails, WiFi, Removable Disks, etc.
Will spread across Networks
Methods and Motives can change at anytime
13. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Most Popular Attack Vectors
Ransomware Overview
14. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Ransomware Overview
Attack Vectors – Malicious Email Links
15. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Ransomware Overview
Attack Vectors – Malicious Email Attachments
16. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Ransomware Overview
Attack Vectors – Drive by Websites
17. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Ransomware Overview
Attack Vectors – Other Common Sources
Social Media Portable Drives Public Wi-Fi
18. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Next-Generation Firewall (NGFW)
• Threat Analysis and Detection
• Behavioral Analysis
• Application Firewall
• Network Intrusion Prevention
• Antivirus Inspection
• Web / URL Filtering
• Email / Attachment & URL Filtering
Preventing Ransomware Attack
Firewalls and Gateways
19. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
• Disallow use of removable disks
• Scan USB disks for malware before use
• Enforce writable disk encryption
• Granular control over CDROM,
Floppies, etc.
• Enforce Read/Write restrictions
• Input/Output port restrictions
Preventing Ransomware Attack
Device Control
20. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
• Antivirus/Blacklisting
• Keep Up-to-Date
• Scan Regularly
• Every Device Must be Secured
Preventing Ransomware Attack
Antivirus (Blacklisting)
21. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
• Application Control / Whitelisting
• Patch Management
• Every Device Must be Secured
Other Noteworthy Tools:
• Microsoft AppLocker
• Microsoft EMET
• Google’s VirusTotal
Preventing Ransomware Attack
Application Control (Whitelisting) - Stop Ransomware Dead!
22. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
Responding to an Attack
Follow your Communication / Action Plan
Cleanup
Disable and Unplug Infected Systems
Engage IT for Cleanup
Involve Technical Vendors for Assistance
Restore from Backup if necessary
Last Resort is to pay ransom
23. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
In summary …
Prepare / Prevent
Educate End Users and Spread the Word
Implement Layered Security
Whitelist Approved Applications
Respond
Stop the spread - communicate with employees
Restore from backup
24. WWW.HOSPITALPORTAL.NET Copyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMCopyrights HospitalPortal.net & IntelliSuite IT Solutions 2016. All rights reserved. WWW.INTELLISUITE.COMWWW.HOSPITALPORTAL.NET
THANK YOU
Thank you for your consideration and time today.
Questions for HospitalPortal.net?
Email sales@hospitalportal.net or Call: 866-588-7700
Questions for IntelliSuite IT Solutions
Email info@IntelliSuite.com or Call: 877-843-5767
Hinweis der Redaktion
Agenda and Goals
HospitalPortal.net will focus on . . .
Non-Technical Aspects of how-to use an Intranet to educate, alert, train, and engage staff on being proactive with IT security to prevent Ransomware Attacks
How-to publish and ensure readership on HITECH, HIPPA and other IT policies using a web based Policy Management Solution
IntelliSuite IT Solutions will focus on . . .
How to use a layered security approach to prevent ransomware attacks
What do if a ransomware attack evades all security layers
About HospitalPortal.net
We are a software development company located in Rolling Meadows, IL.
We specialize in out-of-the box healthcare Intranets and policies and procedures management solutions.
Our content management system has built-in workflow capabilities with regulatory compliant audit trails as well as interactive, social engagement, content publishing, and emergency preparedness tools.
We support over 150,000 daily users across 175 hospitals throughout the US, as well as large health networks like HCA, Cook County Health, NCH & CentroMed.
We employ the best practices in the training and implementation of our products which we have gained from the experience with working with our clients. We base our product off of enhancements and requests made by healthcare organizations.
Thank you Anne for that information. As Anne covered, prevention and responding to a Ransomware attack needs to happen through education, training, and a way to communicate the issues on an ongoing basis. For our portion of the webinar, we are going to highlight the Technical aspects to preventing and responding to a Ransomware Attack. So why ransomware?
Ransomware Overview
Preventing Ransomware Attack – the technical side of prevention
Responding to Ransomware Attack – the technical side of the response