Healthcare cybersecurity strategist who assesses what cyber and AI failures do to patients. 28+ years in healthcare, including 23 years in emergency departments as Lead Emergency Department Technician, clinical preceptor and Epic Super User for 200+ clinicians at two Level II trauma centers, then clinical coordination for interventional radiology. Onboarded clinicians onto ambient AI documentation at DeepScribe. Creator of Patient-Side Threat Modeling (PSTM), which scores clinical AI and medical device risk by patient harm. Featured Defender in Semperis’ Midnight in the War Room (Black Hat USA 2026; ~30-city international tour).
Core Competencies
Clinical AI Risk AssessmentAI Red Teaming (OWASP LLM Top 10, MITRE ATLAS)Ambient & Clinical AI AdoptionMedical Device & IoMT SecurityClinical Threat Modeling (PSTM)FDA Premarket Cybersecurity GuidanceClinical Downtime & Ransomware ReadinessTabletop Exercise DesignClinical Workflow & EHR (Epic)Clinical-Technical LiaisonHIPAA Security RuleNIST AI RMF
Professional Experience
Founder & Principal | Chaunda C. Dallas Consulting2022–Present
Created Patient-Side Threat Modeling (PSTM), a framework that scores clinical AI and medical device risk by patient consequence: physiological dependency, latency to harm, bedside detectability, workaround pressure and downtime survivability.
Built the DFR Lab: 9 IoMT failure scenarios and 3 clinical-AI red-team scenarios (prompt injection, PHI leakage, agentic chain attack), mapped to NIST CSF, HIPAA, FDA guidance, IEC 62443 and the OWASP LLM Top 10.
Designed the 3 A.M. Downtime Drill, a clinical ransomware tabletop for ED and nursing leaders built on regional diversion-cascade dynamics.
Publish healthcare ransomware threat intelligence: Healthcare Ransomware Intelligence Tracker and a Qilin/Agenda threat brief with MITRE ATT&CK mapping and PSTM scoring.
Founding security engagement for a startup platform (Koalesce Studios / Desivity, Aug–Dec 2025): Zero Trust architecture, threat model, and SOC 2 Type I / ISO 27001 readiness frameworks.
Hired as CISO, then retained as vCISO advisor (420+ documented advisory hours): set security strategy, human-risk and awareness programs, and compliance-informed product direction for an early-stage healthcare cybersecurity platform.
Designed role-based security content for clinical, operational and executive audiences; ran phishing-simulation strategy (KnowBe4) and advised on ransomware defense.
Customer Success Engineer — Clinical AI & EHR (Contract) | DeepScribeDec 2021–Mar 2022
Onboarded and trained clinicians adopting ambient AI documentation across multi-site practices; configured workflows in athenahealth, Kareo and eClinicalWorks.
Served as clinical-technical liaison between physicians, engineering and product, turning provider workflow friction into product fixes.
Lead Clinical Coordinator | Azura Vascular CareApr 2016–Oct 2021
Directed clinical operations across interventional radiology and surgical suites where documentation integrity directly affected patient outcomes.
Managed all surgical referrals and payer authorizations for specialty IR cases (uterine fibroid embolization, peripheral arterial disease, hemorrhoid artery, varicocele and ovarian vein embolization).
Detected and shut down a website-spoofing campaign targeting donations, preventing about $30K in fraud; deployed SIEM monitoring and incident-response procedures.
Graduate Research Assistant — Wearable Health Technology | Kennesaw State UniversityJan–May 2020
Researched adoption, security and privacy risks, and ethical issues of wearable health technology for older adults. The project was paused by COVID-19; the research contributed to a faculty-published paper.
Lead Emergency Department Technician & Clinical Preceptor | Epic Super User | Piedmont Healthcare1999–2016
Trusted with high autonomy in high-volume Level II trauma EDs (Eastside Medical Center, now Piedmont Eastside; Piedmont Atlanta); coordinated operations during trauma activations, Code Blue events and mass-casualty responses.
Selected as ER Epic Super User for Piedmont Atlanta’s implementation: trained and supported 200+ clinicians through go-live, upgrades, downtime readiness and troubleshooting.
Ran manual downtime protocols during EHR outages to keep patient care moving, the origin of the downtime-survivability work in PSTM.
Earlier: emergency department registration and referral coordination, including Emory Healthcare.
Mentorship & Recognition
Featured Defender (one of 52) — Midnight in the War Room (Semperis) | Premiered Black Hat USA, Aug 2026 | ~30-city international tour
Technical Mentor — Women in CyberSecurity (WiCyS), May 2024–Present | Co-mentored 600+ learners across three grant-funded Google Cybersecurity Certificate cohorts
Panelist — WiCyS 2026 Virtual Conference | Podcast Guest — Halcyon Last Month in Security (Ep. 006)
Education & Training
M.S., Information Technology (Cybersecurity concentration) — Kennesaw State University
Graduate Certificate, Healthcare Technology · B.S., Criminal Justice — Kennesaw State University
MiC LEAD Builders Program — year-long SOC apprenticeship: Splunk alert triage, MITRE ATT&CK-mapped investigation, ransomware incident simulation (2024–2025)
In progress: Microsoft SC-900 (exam Oct 2026) · CompTIA SecAI+