Applying the Cyber Defense Matrix in Healthcare
Cyber Defense Matrix creator Sounil Yu applies his logical framework to healthcare environments, categorizing clinical assets and identifying defensive gaps.
Summary
Making Sense of the Complex Security Vendor Landscape
Healthcare CISOs are inundated with vendor products and regulatory requirements, making it difficult to objectively evaluate defensive coverage across clinical networks.
Understanding the Cyber Defense Matrix (CDM)
Sounil Yu explains the structure of the Cyber Defense Matrix, mapping the five NIST CSF functions (Identify, Protect, Detect, Respond, Recover) across five asset classes (Devices, Apps, Networks, Data, Users).
Mapping Healthcare Assets and Medical IoT
Yu demonstrates how hospitals can use the CDM to map specialized clinical assets—such as bedside infusion pumps, PACS imaging servers, and EHR databases.
Identifying Defensive Gaps and Optimizing Spend
The presentation illustrates how healthcare security teams can use the matrix to pinpoint architectural blind spots and rationalize security tooling investments.
Related talks
Biohacking Village·28 min
Veronica Schmitt
Explores pragmatic strategies for securing medical technologies, improving device forensics, and remediating clinical vulnerabilities.
Biohacking Village·1 hr 47 min
Negre · McMahon
Provides practical, cost-effective strategies for hospitals and clinical engineering teams to harden legacy medical devices.
DC Groups·1 hr 18 min
DC11562 Santiago presents real-world experiences and lessons learned from security assessments in the healthcare industry.