Microsoft Azure Cloud Deployment Services for the Epic EHR: 4 Week Security Assessment

Cybersecurity Roadmap 4-week security assessment with Microsoft Azure We bring leading healthcare industry CTO, CISO, and EHR technical experts who, along with our security and Microsoft Azure teams, help hospitals and healthcare organizations using EHR optimize their security posture on Microsoft Azure.

1. Customer challenge a. Lack of governance and visibility into the cloud resources b. Regulatory standards and compliance violations c. Inadequate security controls over multi-cloud and on-premises environments d. Supply chain attacks, malware infections, and ransomware attacks e. Single pane of view of cloud workloads and security controls f. Complex container-oriented, Kubernetes-based, and sprawl of workloads/configurations g. The cost of data breaches increasing due to newer threats and tactics h. Insufficient security assessment guidelines for CI/CD pipelines and DevSecOps

2. Common obstacles Developing a cloud security strategy can be challenging. Complications include:

   External threats a. Substantial growth in cyber attacks b. Dealing with zero-day threats c. Novelty attack patterns - supply chain attacks, lateral movement in the cloud.

   Mitigating risks a. Missing context in reported vulnerabilities and risks b. Lack of visibility into software bill of materials c. Missing intelligence to combat hidden vectors used by attackers

3. UST’s approach
   UST has an approach to cloud security on Microsoft Azure that is built on the strong foundation of our security strategy model and has been successfully implemented across dozens of organizations utilizing Microsoft Azure. It has the following characteristics:

   a. It focuses on control areas likely to present a specific challenge in the cloud (e.g., data protection and log and event management) b. It highlights how the different service models (SaaS, PaaS and IaaS) present different security challenges and offer resolutions to these challenges

Key activities in the assessment

1. Initial discovery call
2. Pre-assessment security questionnaire
3. Assessment interviews and security survey
4. Findings call
5. Findings Report

About UST UST offers health tech solutions that enhance trust, connectivity, personalization, and efficiency for healthcare and life sciences enterprises. Our human-centered approach creates a more caring and connected future at physical and digital health convergence. Our deep domain experts ensure clients swiftly adapt to evolving tech and regulatory landscapes so they can focus on their core objective of promoting better health and care. Discover our healthcare and life sciences work at https://www.ust.com/en/industries/healthcare-and-life-sciences.