Segmenting a hospital network to protect patient data and devices

The challenge

A hospital ran clinical systems, billing and a fleet of connected medical devices on a largely flat network. A single compromised device could reach patient records, and the organization couldn’t clearly evidence how sensitive data was protected under HIPAA.

Our approach

1. Discovery — profiled every device and data flow, including vulnerable connected medical devices.
2. Segmentation design — isolated EHR, billing and patient records from devices and general traffic.
3. Identity & monitoring — enforced access by identity and added continuous monitoring and response.
4. Evidence — documented controls to support HIPAA and partner security reviews.

The solution

VeeMost segmented the hospital’s network so the systems that hold patient data are isolated from the devices most likely to be compromised, added identity-based access and 24/7 monitoring, and produced the documentation the organization needs to stand up to a HIPAA review — without disrupting patient care.

Results