

EP240 Cyber Resiliency for the Rest of Us: Making it Happen on a Real-World Budget
Aug 25, 2025
Errol Weiss, Chief Security Officer at Health-ISAC, dives deep into the world of cyber resilience in the healthcare sector. He stresses the importance of moving from a focus on 'just cybersecurity' to a broader emphasis on digital resilience. With practical tips, he shares how even under-resourced organizations can enhance their security without breaking the bank. Weiss highlights the need for basic hygiene in cybersecurity and advises on evaluating vendor security to prevent hacks. His insights shine a light on the path to stronger cyber defenses.
AI Snips
Chapters
Transcript
Episode notes
Shift From Perfect Protection To Recovery
- Resilience requires accepting you cannot prevent every incident and focusing on fast detection and recovery.
- Practice and planning for outages reveals real gaps in preparedness beyond perimeter defenses.
Community Debugging During A Vendor Outage
- Health-ISAC acted like a neighborhood watch during the CrowdStrike faulty update incident.
- Members worldwide shared observations rapidly and connected the outage to a vendor update.
Use Free Resources And Cloud Wisely
- Use free public resources and sector guidance to prioritize and harden systems cheaply.
- Leverage cloud services for scalable security but remember shared responsibility remains critical.