Back to Guardra
Blog
Research, playbooks, and honest writing.
Notes on hospital network security, written when there is something worth saying rather than on a schedule. Regulatory analysis carries the citation; technical claims carry the limitation.
Regulatory7 min read
Segmentation is proposed to stop being optional. Most hospitals cannot prove theirs.
The HIPAA Security Rule NPRM would introduce network segmentation as an explicit requirement. The gap between asserting isolation and evidencing it is where most estates sit today.
Ramiz Rafiq
Founder, Guardra
Technical5 min read
What flow records cannot tell you
There is a good argument that clinical networks are uniquely analysable because HL7 and DICOM often run in the clear. It does not apply to an assessment built on firewall logs, and pretending otherwise is how this work loses credibility.
Ramiz Rafiq
Founder, Guardra