Some Important Risks Begin Outside the Scanner’s View

Jeff Hudesman recalled an early healthcare role that expanded his understanding of security. Technical discovery was useful, but it did not describe every way sensitive information could be handled.

In his Fireside Chat conversation, he used the example of a physician with patient information on an external hard drive. The point was the potential significance of an ordinary action and the limits of expecting traditional scanning tools to reveal the whole situation.

He connected that experience with learning how policies, technical controls and processes each contribute to protection.

Understand how the information moves

A scan reports what it can observe. A conversation about how someone actually works can reveal another part of the picture. Hudesman's recollection made that difference concrete through the handling of patient information.

The editorial application for a cyber professional is to include workflow questions alongside technical findings. Where does information go? Why is it moved? What task is the person trying to complete? Those answers can help explain which safeguards need attention.

This is not a current assessment of healthcare technology or a claim that one kind of tool is ineffective. Hudesman was describing lessons from an earlier role. The enduring point is that an organization's use of information can create questions that require more than one method of discovery.

His story also illustrates how early operational experience can broaden professional judgment. Learning what a control does is important. Learning where its view ends helps a practitioner know when another question, another source of evidence or another kind of safeguard is needed.

Listen to the original conversation with Jeff Hudesman · Read the transcript

From the Fireside Chat archive: original episode published 2022-10-13. This is an editorial reflection on that conversation, not a new interview or an update on the guest’s current role.