St. Joseph's Health—Cybersecurity & Vendor Risk Management: Why It Matters | Redefining Security With Ebony Riley And Jesse Fasolo

Many organizations are ill-prepared when it comes to making sure their hospital is protected from risk, both from an organizational and IT standpoint. It's increasingly important to have a concrete risk assessment strategy, one that explicitly includes utilizing third-party (vendor) risk management. 

When our guest, Jesse Fosolo, joined St. Joseph’s Health in August of 2014, he's completely flipped the risk assessment and IT protocols at the hospital on its head, partnering with the legal team—more specifically, General Counsel/Chief Operating Officer, Ebony Riley. This connection between the CISO and legal counsel has proven to be a huge win for risk management throughout the organization, mapping risks through various security frameworks, including HIPAA, NIST CSF, HITRUST, and others.

Listen in to get some third-party risk management insights from this New Jersey-based, 1000+ provider, 150+ location network healthcare organization created a Vendor Risk Management strategy as this dream team discuss their journey down risk management lane.

____________________________

Guests

Ebony Riley
Associate Council, St. Joseph's Health (@sjh_nj)
On LinkedIn | https://www.linkedin.com/in/ebonyriley/

Jesse Fasolo
Director, Technology Infrastructure & Cyber Security, Information Security Officer, St. Joseph's Health (@sjh_nj)
On LinkedIn | https://www.linkedin.com/in/jessefasolo/

____________________________

This Episode’s Sponsors

Archer: https://itspm.ag/rsaarchweb

HITRUST: https://itspm.ag/itsphitweb

____________________________

Resources

____________________________

To see and hear more Redefining Security content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-security

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/podcast-series-sponsorships

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.