Healthcare

Hospital networks combine ordinary corporate IT with thousands of connected clinical devices that are FDA-regulated, vendor-locked and long-lived. They need different treatment.

The clinical device problem

Infusion pumps, imaging systems and monitoring equipment frequently run unsupported operating systems, cannot be patched without vendor revalidation, and will not tolerate an active scan. They are also on the same network as everything else.

What we do

• Passive inventory of connected clinical devices — usually the first accurate one the organization has had
• Segmentation isolating clinical devices from corporate access and from each other by function
• Unified EPP and EDR across the corporate estate, where agents can run
• Compensating controls documented per device class for the equipment that cannot be remediated
• Containment rules that will never isolate a device involved in active patient care

Evidence

Control documentation and logging built to support HIPAA Security Rule obligations and internal risk analysis, produced as an output of the build rather than assembled before an audit.