Specialized Cybersecurity Operations for the Healthcare Sector
Enhanced Cybersecurity Operations For Any Size Healthcare Organization

Cybersecurity operations are vital to the delivery of highly available and secure patient care. Recognizing the direct relationship between cybersecurity and patient care, healthcare leaders are collaborating to protect people, data, and infrastructure as a unified coalition.


This collective approach to cybersecurity operations allows the HSOC to customize enhanced cybersecurity operations for any sized healthcare provider—even remote 5-bed hospitals.


24x7x365 Security Event Monitoring

The HSOC team provides 24x7x365 security event monitoring to help you sleep well at night. And immediate response time that events are swiftly identified, triaged, investigated.

Collaborative Alert Development & Runbooks

The HSOC team specializes in detection methodology and implementing various proven use cases from our robust alert catalogue. We can help your organization focus alert implementation to reduce risk within your environment and develop custom run books to integrate with you processes.

Actionable Healthcare Intelligence & Collective Threat Management

We collect verified real-time threat data observed in the healthcare sector that you can use to proactively protect your organization. Our daily collaborative threat briefings will connect your organization to our network of cyber security professionals and the current threat landscape.

Event Aggregation and Analysis

Alerts, logs and information from all signal sources are aggregated and compared by the HSOC team for a more extensive look into possible indicators of malicious activity. This collective data allows us to discover larger trends in the healthcare threat landscape.

magnifying glass.png
graph white.png
Untitled-2 copy.png

Incident Investigation and Resolution

Our certified incident handlers stand ready to investigate and resolve security incidents while working with your team to restore normal operations and prevent future incidents by incorporating lessons learned.

Playbook Orchestration & Automation

The HSOC is equipped with cutting edge Security Orchestration and Automation technology. We adapt runbooks to incorporate automation and reduce the time to triage and investigate security alerts as well as reduce the mean time to remediate security incidents.

Custom Incident Simulation & Team Training

The time to test your incident response plan is not during a live incident. The HSOC team uses your event types, environment, and third-party data to conduct incident simulation and training activities with your team. Lessons learned are reinforced through curriculum development and training.

Vision process begins, program foundation is laid, Michigan Medicine comes on board, and the HSOC kicks off

The HSOC opens and goes LIVE

HSOC made available to entire healthcare sector & focus on scale for rural and other small healthcare providers

Jan 2018

July 2018

Sept 2018

April 2019

June 2019

Finalized inaugural participants, Michigan Medicine, Beaumont Health, Michigan Health and Hospital Assc., & Munson Healthcare

Information sharing agreement is finalized, collaboration model becomes official

Inaugural Members