Zero Trust Cybersecurity for Health Technology Tools, Services, and Devices

About the Activity

Zero Trust is a security framework requiring all users, whether in or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. Zero Trust assumes that there is no traditional network edge; networks can be local, in the cloud, or a combination or hybrid with resources anywhere as well as workers in any location.

The goal is to build conventional, general-purpose zero trust microsegmented IT infrastructure and guidelines in healthcare, that are aligned with IEEE standards, for remote patient monitoring tools, workforce, services, platforms, health systems, EHR (Electronic Health Record) , tokenomics (Token + Economics; the factors that impact a token’s use and value, including but not limited to the token’s creation and distribution, supply and demand, incentive mechanisms, and token burn schedules. A cryptocurrency that represents the value of health information can motivate individuals to make their health data shareable to those who are willing to pay for it. This contributes to growing sentiment of healthcare consumerism).

Goals of the Activity

  • Develop a roadmap to a suite of new zero-trust network access (ZTNA) standards that integrate commercial and open-source products to showcase robust security features of Zero Trust Architecture (ZTA) when applied to enterprise IT use cases. This will include authentication and authorization of subject and device discrete functions, remote users, bring your own device (BYOD), and cloud- based assets that are not located within an enterprise-owned network boundary.
  • Develop recommendations to validate and verify selected technologies to modernize standard cybersecurity approaches in healthcare to mitigate hacking, secure data and any interruption of work
  • Identify frameworks for End to end security of authentication, privacy and security of data and users, ensuring interoperability and encryption enabling private transactions on a public blockchain for new healthcare products and services using tokenomics models
  • Support other IEEE initiatives in common areas of internet, focus and applications through standards
  • Engage a broader community in the domains of blockchain, trusted computing, federated learning, and decentralized identifier to increase universality of the standards collaborative output

Getting Involved

Who Should Get Involved

  • Zero trust, cybersecurity, and cloud companies
  • Cybersecurity, and Identity as a Service (IDaaS) companies
  • Think tanks and NGOs
  • Pharmaceutical and biopharmaceutical manufacturers, Laboratories, Contract Research Organizations
  • Hospitals
  • Regulatory organizations (i.e. FDA, EMA, European Commission, HHS, etc)
  • Technology Companies, Medical Device manufacturers, App developers, RPM companies, Telehealth Platform and service Providers
  • Artificial Intelligence developers, Machine Learning developers, Augmented Reality developers, Blockchain/DLT, IoMTs/Sensors
  • Web3, NFT, DeSci, and DAO communities
  • Universities, organizations, governments, corporations and individuals involved in the research, design and solutions around Trust technology

How to Get Involved

To learn more about the activity and how to join, please express your interest by filling out Zero Trust Cybersecurity for Health Technology Tools, Services, and Devices interest form.

Subscribe to our Newsletter

Sign up for our monthly newsletter to learn about new developments, including resources, insights and more.