Dr. Derek Sedlack is an Associate Professor of Cybersecurity at the Graduate School with the University of Maryland University College. His research interests include information security, privacy and perceptions of risk. As an award winning Professor and multi-patent holder, Dr. Sedlack’s work has focused on social and behavioral aspect of information security. Dr. Sedlack is co-founder of the Americas Institute for Cybersecurity Leadership, graduate peer-review publications that focus on risk. He remains Visiting Professor at Kaiserslautern Technical University, teaching a class on information security within the department of informatics. Dr. Sedlack has been invited by the 4-star Allied Commander of the US Air Force, Europe and Africom as a SME to advise the General Staff on information security-related issues. He holds an earned Doctorate and Master of Science in Management Information Systems from Nova Southeastern University’s College of Engineering and Computing, and Bachelor of Science in Computer Information Systems from Saint Leo University.co-author: Craig Vrabec, Esq., holds an appointment with the University of Maryland University College as Professor of Business and has been an educator for the last 10 years at the graduate and undergraduate level for four different universities in the United States, Europe, and the Middle East. His areas of expertise include legal implications in business, international business, and ethics. Current research includes privacy rights as pertain to cyber security and framing published internet breaches from a stakeholder liability standpoint. Vrabec has been an active legal practitioner in the State of Ohio for over 30 years and has professional experience at the federal, state, and local levels. Many of these experiences have included, but are not limited to, working for several Fortune 500 companies, representing state agencies and private practice of law.
Increasing reports of hacked medical devices put nanotechnology at risk with larger, more traditional infrastructure. Even while our programming languages evolve and information security has become part of the spotlight, we continue to experience data breaches. Even though many Healthcare breaches seem to be focused on extracting monetary gain, there are additional repercussions to allowing programmatic stand-alone devices external accessibility. The Healthcare segment is one of increasing sophistication to match the biotic world of constant mutation and variation. As medical professionals engage technology to improve patient care outcomes, it is critical for healthcare organizations to understand the legal implications of technological infusion as well as design protocols to aid in the safeguarding of usability as well as data. This case study will discuss the legal risks of poorly designed medical devices (including nanotechnology) and mitigation factors to improve the organizations cybersecurity posture through the Information System Security Frame Alignment Model (ISSFAM).