SECURITY & THE UNIVERSITYINCLUDING A HOSPITAL

October 3, 2008

Doyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Medical Center faculty: about 1,000

Medical Center staff: 6,000+

UK A.B. Chandler Hospital attending physicians: 630

UK A.B. Chandler Hospital residents: about 500

UK A. B. Chandler Hospital and Kentucky Children’s Hospital (2006) discharges:24,760

UK A. B. Chandler Hospital Emergency Department (2006) visits: 44,646

UK A. B. Chandler Hospital (2006) outpatient visits:275,608

All Kentucky Clinic (2006) visits: 1,082,334

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

University Security Model Best practices & policy Perimeter firewalls w/ Authentication & Authorization FERPA Issues The library influence Mobility – access changes everything

Hospital & Clinics Security Model Best practices & policy Perimeter firewalls w/ Authentication & Authorization HIPAA Issues and patients wanting to stay in touch Student & the protected medical environment Mobility, remote locations, influence of the private practice

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Status of the Healthcare Communities

According to analysts at a leading IT research and advisory company, "By 2011, early technology adopters will forgo capital expenditures and instead purchase 40 percent of their IT infrastructure as a service. Increased high-speed bandwidth makes it practical to locate infrastructure at other sites and still receive the same response times. Enterprises believe that as service-oriented architecture (SOA) becomes common, 'cloud computing' will take off, thus untying applications from specific infrastructure."

Academic environment Demands high for all collaboration tools Faculty Issues Student Issues Facebook Blackboard & Student Systems Directories & federation e-mail & text Research Issues Openness

UK Healthcare environment Patient rights & wishes PHI & e-mail Struggle of academic role & physician

responsibilities Desktops, patient rooms & the Patient Record Demands of HIPAA & patient freedoms (mobility) Layer’s of security

Firewalls Data Center (data repository) Desktops (degree of controls) Authentication & Authorization issues Remote Access NAT is good Audit trails Business partners (physicians, clinics & hospitals)

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Infrastructure 10 Gig to Kentucky Regional Optical Network Gigabit connection to Internet 2 900+ Megabit connection to Internet 1 10 Gig campus backbone

Video Polycom e-health video teleconferencing sites TANDBERG Codian video bridges Desktop solutions (Microsoft, IBM & Polycom)

Desktops 80% Windows & 20% Apple

Security Cisco Firewall’s & VPN Microsoft Active Directory ( & LDAP) IronPort (PHI) Regular Scanning & Log Logic

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Hospital at a University

1.1st firewall stops bad stuff

2.23,000 students & 10,000 faculty and staff next

3.2ed firewall protects medical center

4.3000 students & 6000 faculty and staff

5.Wireless everywhere

6.WiFi, WiMax & Why

7.Referring physicians & adjunct faculty

8.All the outsource contracts

9.HIPAA still counts

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

University Communities will be able to interactat anytime with anyone having the support of all online resources.

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Cloud based influences Google & Microsoft services Amazon, IBM Blue Cloud & others Healthcare Vendor Solutions iPhone & others

Voice Services From hardware to software Centralized (to) Departmental

Infrastructure Directory Federation Presence

Security appliances

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Integration of all collaboration toolsWith emphasis on directory federation

Robust Mobility platformiPhone (1st) &Microsoft Mobile (2ed)

Transparent access to informationWith improved securityEmphasis on changing service model

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Doyle Friskney • Chief Technology Officer • University of KentuckyDoyle Friskney • Chief Technology Officer • University of Kentucky

Embrace Change Influences

Understand the influence of governance & networks in security issues

Weave emerging technologies with proven university pedagogy

Manage content & security (anywhere any time)Camps and Clouds

Ensure openness within the bounds of patient & student rights

Enjoy Success