Case Study on Zero Trust Implementation in Healthcare

This case study details the security remediation project undertaken by a major New York Children’s Hospital following a significant security incident. The incident involved an administrator gaining unauthorized access to the hospital's network by connecting a personal laptop to a patient room wall jack. The root cause was identified as 'Technical Knowledge Debt,' stemming from years of staff turnover and misconfigurations. The hospital engaged XenTegra to implement a comprehensive remediation strategy focused on Cisco Identity Services Engine (ISE) and Cisco Secure Connect. The project involved identifying security gaps, consulting experts, and conducting a thorough audit of the network. The engagement resulted in the transformation of the hospital's network into a Zero Trust environment, effectively blocking unauthorized devices and modernizing security practices. The case study emphasizes the importance of addressing technical debt in healthcare IT to ensure patient safety and secure operational technology.