Nuvolo > Case Studies > Improved Medical Device Security with Out-of-the-Box Integration: A Case Study

Improved Medical Device Security with Out-of-the-Box Integration: A Case Study

Technology Category

Functional Applications - Computerized Maintenance Management Systems (CMMS)
Platform as a Service (PaaS) - Device Management Platforms

Applicable Industries

Electronics
National Security & Defense

Applicable Functions

Maintenance

Use Cases

Behavior & Emotion Tracking
Tamper Detection

Services

System Integration

About The Customer

The customer is a regional healthcare organization with over 15,000 healthcare professionals. They handle more than 3 million patient visits a year and rely on thousands of network-connected medical devices for patient care. The data generated by these devices is used to derive better and lower-cost patient outcomes. The organization's healthcare technology management (HTM) team is responsible for managing the security and maintenance of these devices. The team had previously invested in a computerized maintenance management system (CMMS) to manage the devices, but found it difficult to keep track of the constantly changing device landscape.

The Challenge

A regional healthcare organization with over 15,000 healthcare professionals and more than 3 million patient visits a year relied on thousands of network-connected medical devices for patient care. The data generated by these devices was used to derive better and lower-cost patient outcomes. However, the connectivity of these devices also posed a security risk if a successful exploit caused disruption, impacting safety and reputation. The healthcare technology management (HTM) team wanted to lessen their risk landscape by identifying their network-connected medical devices while watching for exploits and recalls. The HTM team had invested in a computerized maintenance management system (CMMS) to try and capture all the devices used in the organization. However, with thousands of devices constantly being added, moved to other locations, and then retired, it was hard to keep track of them all. The CMMS system was not designed for access to the system via the cloud or from mobile devices such as smartphones.

The Solution

Nuvolo OT Security provided an out-of-the-box integration with the healthcare organization's existing device discovery and security monitoring tool. This integration replaced the legacy CMMS system with Nuvolo Connected Workplace, a modern, connected, cloud-based solution accessible via web or mobile app. This solution provided a single trusted data source that’s updated every time a device was purchased and provisioned. The solution integrated the single inventory with security events creating an intelligence hub. When a security event occurs, the security team not only knows who to dispatch, but they can also focus on the response based on threat risk and the number of devices affected. The solution also leverages the latest security information from sources such as the National Institute of Standards and Technology (NIST) vulnerability management data (NVD) to help the security team to assess the unusual activity.

Operational Impact

As a result of implementing Nuvolo OT Security, the healthcare organization can operate devices that are less open to disruption, improving patient safety. With the intelligence hub, the device technicians and security teams have accurate visibility into detailed device information such as location, software and firmware upgrades or a manufacturer recall. The solution also includes device tracking and ticketing so that the HTM and security team can see when the device is corrected. Along with OT Security, Nuvolo Connected Workplace met their other clinical and facilities requirements, which included the ability to pull together device records, work order history, service contracts and parts information all in the same, reportable platform.