The Clinical OpSec Playbook
Real entries, written the way a clinical team documents a protocol — clear steps, real decision points, no jargon for its own sake. Each one runs through the DFR Framework: Triage → Stabilize → Treat → Recover.
Published
Anatomy of a Healthcare Ransomware Incident
A composite walkthrough of a hospital ransomware incident, mapped phase by phase through Triage, Stabilize, Treat, and Recover — with the clinical-impact read most incident reports leave out.
Case StudyCatching a $30K Donation Scam Before Giving Season
How domain and dark web monitoring caught a spoofed donation site impersonating a nonprofit client during its highest-traffic fundraising window.
Threat IntelligenceReading Ransomware Through the Clinical-Impact Lens
Most threat intel stops at the TTPs. Healthcare threat intel has to answer one more question: what does this mean when it hits an infusion pump fleet or a trauma activation.
In development
Reading a Device Security Questionnaire Like a Clinician
Vendor risk questions that actually matter for connected medical devices, and network segmentation for environments that can't tolerate downtime.
Before a Clinical AI Tool Goes Live
What "AI red-teaming" means when the failure mode is a patient outcome, mapped to HIPAA and the NIST AI Risk Management Framework.
Notes for Clinicians Considering a Move Into Cyber
What WiCyS mentees ask most, answered in one place.