Becker's Hospital Review

52 61 hospital and health system CISOs to know | 2019 B ecker's Hospital Review named 61 hospital and health system chief information secu- rity officers to know in 2019. Hospitals and health systems across the country have appointed chief information security offi- cers to oversee cybersecurity efforts, assist with data management and drive new technology im- plementation. While the role can vary from one organization to another, many CISOs featured on this list are experts in healthcare cybersecurity and manage teams who specialize in keeping patient and provider data safe. is list highlights the outstanding efforts of CISOs across the country, many of whom have extensive IT leadership experience. ey have received professional recognition from health IT societies, advised on health IT initiatives and held leadership roles for professional develop- ment organizations. Becker's Hospital Review accepted nominations for this list and conducted internal research to devel- op the final profiles. Individuals and organizations featured on this list do not pay and cannot pay for inclusion. CISOs are listed in alphabetical order. For questions or comments on this list, contact Lau- ra Dyrda at ldyrda@beckershealthcare.com. Vikrant Arora. CISO of Hospital for Special Surgery (New York City). Mr. Arora has more than 15 years of experience in enterprise secu- rity and risk management. He oversees IT for Hospital for Special Surgery, a 215-bed hospital focused on orthopedic procedures. Mr. Arora lends his expertise to the hospital's security strategy, regulatory compliance and business risks. He has previous experience as chief infor- mation security and risk officer for NYC Health + Hospitals. Jennings Aske. Senior Vice President and CISO of NewYork-Presbyterian (New York City). Mr. Aske oversees NewYork-Presbyteri- an's information security and business continu- ity programs as senior vice president and CISO. He also has responsibility for the 196-bed hos- pital's medical staff office. He became NewYo- rk-Presbyterian's CISO in 2015 aer spending time as vice president of information security and CISO of Nuance Communications, and CISO of PartnersHealth Care and UMass Me- morial Medical Center in Boston. omas August. CISO of John Muir Health (Walnut Creek, Calif.). Mr. August became CISO of John Muir Health in April 2015 aer spending time as the director of information se- curity at San Diego-based Sharp HealthCare and holding IT security positions at Sony Corp. of America. In his current role, he oversees health information security for the two-hospital health system, which includes more than 1,000 physi- cians. During his time at John Muir, Mr. August has been instrumental in risk assessment and planning, as well as implementing new technol- ogies to make the system more secure. Connie Barrera. Corporate Director and CISO of Jackson Health System (Miami). Ms. Barrera became director of information assur- ance and CISO of Jackson Health System in February 2014 aer spending time as director of information security and compliance at the University of Miami. She has experience devel- oping privacy and confidentiality standards and policy as well as risk management and securi- ty awareness. In her current role, Ms. Barrera oversees information security for Jackson's six hospitals and several urgent care centers. John Boehme. CISO of Wake Forest Baptist Health (Winston-Salem, N.C.). Mr. Boehme spent time as Wake Forest Baptist Health's asso- ciate vice president for academic administrative systems and Reynolda Campus interim CIO before becoming CISO of the 1,000-bed health system. Mr. Boehme oversees information secu- rity for the health system's 14,000 employees. He is an avid speaker at industry events and serves on the MCNC Advisory Council, a nonprofit organization that builds and operates a broad- band infrastructure for research, education and healthcare operations in North Carolina. Dan Bowden. Vice President and CISO of Sentara Healthcare (Norfolk, Va.). Mr. Bowden oversees information security for Sentara Healthcare's 12 hospitals and 28,000 team members. He works with universities to develop the next generation of cybersecurity experts and has experience with cybersecurity solutions for the cloud as well as digital plat- forms. He also conducts research into block- chain use for cybersecurity and business. Prior to joining Sentara, Mr. Bowden worked with technology programs in higher education, banking and retail. Scott Breece. Vice President of Security and CISO of Community Health Systems (Frank- lin, Tenn.). Mr. Breece joined Community Health Systems in 2014 and oversees informa- tion security for the 106-hospital health system. He has experience with healthcare data digiti- zation and risk management. He is a veteran speaker at industry events and was part of the team that received the Information Securi- ty Project of the Year Award from Tech Exec Networks in 2011 for an identity management project that doubled its user base in less than two years. Dave Christiano. Chief Technology Officer and CISO of Middlesex Health (Middletown, Conn.). Mr. Christiano has more than 20 years of experience in IT and oversees Middlesex Health's information security and cyberse- curity. He is also responsible for the 275-bed Middlesex Hospital's clinical imaging and biomedical engineering teams. Mr. Christiano has previous experience as the director of IT at Norwalk (Conn.) Hospital and director of IT infrastructure at Yale New Haven (Conn.) Health System. Dan Costantino. CISO of Penn Medicine (Philadelphia). Mr. Costantino has experience in strategic planning and enterprise informa- tion security programs development. He over- sees information security for Penn Medicine's six-hospital health system as CISO. Mr. Costan- tino previously served as CISO for Henkels & McCoy and spent time as a principal for Layer 8 Security, a cybersecurity consulting practice. Andrew Coyne. CISO of Mayo Clinic Health System (Rochester, Minn.). Mr. Coyne became Mayo Clinic's CISO in April 2016 aer spending time as the director of PwC's health industries cybersecurity practice. He is responsible for infor- mation security spanning the health system's three hospital campuses and around 63,000 employ- ees. In this role, he has gained experience build- ing Mayo's information security capabilities. e health system also supports the Mayo Clinic Care Network, an information exchange that includes 40 healthcare organizations across the world. Kevin Crain. CISO of University of Maryland Medical System (Baltimore). Before serving as CISO of University of Maryland Medical System, Mr. Crain was CISO for Pocono Health System Sponsored by:

• Cover