Drex discusses significant disruptions in federal cybersecurity leadership, including the investigation of former CISA Director Chris Krebs, government officials withdrawing from the RSA Security Conference, and potential 40% personnel cuts at CISA. Drex emphasizes that healthcare organizations should not expect federal cybersecurity assistance and must instead build their own community of security partners and resources.
Remember, Stay a Little Paranoid
Donate: Alex’s Lemonade Stand: Foundation for Childhood Cancer
Hey everyone. I'm Drex and this is the two minute drill of drill where I cover three hot security stories twice a week. All part of the 229 project cyber and risk community. I try to keep the podcast mostly plain English and mostly non-technical, so it's easy for everyone in the organization to consume so that everyone can do their part, to keep patients and families, and the whole health system safe.
Today's episode is brought to you by google healthcare systems are lowering cost and boosting endpoint security with Chrome OS devices paired with Chrome Enterprise, A secure browser that's trusted by billions of users. So now there's a safer way, a better way for healthcare teams to work safely on the web.
was fired by Trump after the:My 2 cents. This whole investigation makes the phrase trumped up. Charges really come to life. Trump also pulled Krebs security clearance and the clearances of anyone working at Krebs employer Security Company, Sentinel One. It feels like HIMSS all over again. Only this time it's the RSA Security Conference In San Francisco, government officials have told RSA they'll no longer be attending the conference.
The RSA stage usually features some of the nation's top national cybersecurity officials. Recall that Trump just recently fired. General Timothy Hoff. Who led both the National Security Agency and US Cyber Command lawmakers on both sides of the aisle have expressed bewilderment over that firing in the past week.
And since I'm on a roll, it now appears that CISA is bracing for another significant personnel cut As much as 40% of the agency could be eliminated in the coming days. Remember back in March, doge and HHS made CISA fire about 130 employees only then to be forced to rehire those probationary employees that they'd let go.
In retaliation, CISA leadership put those returning employees on administrative leave in reality, not allowing them to return to work. And then a couple of weeks later, $10 million in funding was cut from CSA for the multi-state isac. An organization that provides free and low cost threat detection and response to state and local governments.
And if you've been following any of the security reporting lately, state and local governments have been getting hammered by the bad guys lately. All that to say that if it's not clear yet, the federal government is not coming to help us in healthcare. There are some amazing folks affiliated with the government who will try, but even those organizations are primarily built with volunteers from health systems and other healthcare organizations who are sharing best practices, advice and guidance.
But if you're holding your breath for federal funding or new policy or legislation, I would advise you to be really skeptical right now from a cyber perspective. We're gonna have to help ourselves, build community, stay connected, find people you can lean on and learn from. And that includes other health systems, other great security leaders, and other great partners.
And as always, I'm here. Let me know how I can help. You can read more on all these stories and all the latest healthcare innovation, tech and security news at the industry's fastest growing news site this week. health.com/news. Today's episode is brought to you by Google. You can keep patients safe and reduce the burden for IT operations staff and create a better clinician experience all with one platform.
Google Chrome OS with Chrome Enterprise. Find out how by scheduling a chat today. Go to this week, health.com/chromeos. By the way, you can get all the past episodes of the two minute drill at this week, health.com/unh hack. That's it for today's two minute drill. Thanks for being here. Stay a little paranoid and I'll see you around campus.