Baptist Health Case Study Background
Baptist Health is a full-spectrum health system made up of nine hospitals, 23,000 employees (in addition to more than 2,000 independent physicians), more than 400 points of care, and nearly 2,500 licensed beds. The organization’s employed provider network, Baptist Health Medical Group, has close to 1,500 providers. This includes more than 750 physicians and over 740 advanced practice clinicians. Managing healthcare device security across an environment of this scale requires visibility into the medical, IoT, IT, and peripheral devices operating throughout the organization.
Baptist Health is working to strengthen its cybersecurity posture and Zero Trust strategy, with healthcare device security playing an important role in protecting its diverse technology environment.
The Challenge: Visibility Across a Complex Healthcare Environment
Baptist Health operates and relies on an extensive ecosystem of medical devices, IoT devices, peripherals, and traditional IT equipment. Maintaining accurate visibility across this diverse environment is essential for effective cybersecurity and asset risk management.
However, achieving a complete asset inventory can be challenging. As Michael Erickson, CISO of Baptist Health, explains:
“Understanding what’s in our facilities at any given time is a big challenge.”
The challenge extends beyond identifying network-connected equipment. Security teams must also account for devices operating at the physical layer, including peripherals and other assets that may not be fully visible to traditional security solutions.
Healthcare Device Security Across Medical, IoT, and IT Assets
Healthcare environments depend on a large and constantly changing ecosystem of medical, IoT, IT, and peripheral devices. Effective healthcare device security starts with knowing what devices are present, what they are, and whether they can be trusted.
Traditional security controls may have difficulty distinguishing a legitimate device from one impersonating or spoofing a trusted asset. With devices ranging from critical medical equipment to everyday peripherals, Baptist Health needed greater visibility into the integrity of its hardware environment.
As Michael Erickson explains:
“When you think about the delivery of a piece of equipment, can we ensure that the delivered equipment is truly what the manufacturer designed?”
Fast Deployment Without Adding Operational Complexity
For Baptist Health’s security team, improved visibility also needed to come without introducing significant operational overhead.
Sepio’s approach did not require traffic monitoring or changes to the existing network infrastructure, allowing Baptist Health to deploy the solution without the heavy lift associated with alternatives it had evaluated, including approaches requiring switching-environment upgrades.
Sepio provided visibility across network-connected and peripheral devices while integrating with Baptist Health’s existing cybersecurity technology stack. Michael Erickson describes the experience:
“Thanks to its low maintenance requirements, “[Sepio] happened to be something that was very lightweight and something very simple to install. And we saw value from it very quickly, without adding staff.”
See How Baptist Health Improved Network Asset Visibility
Read the full case study to learn how Baptist Health used Sepio to improve asset visibility, support its Zero Trust strategy, and strengthen security across its healthcare environment.
Gain visibility into known and shadow assets, validate device trust, and identify hardware-related risks across your environment. Talk to an expert.
Download Case Study
