Security principles established decades ago remain fundamentally sound - defense in depth, encryption, access controls - yet healthcare faces unprecedented convergence of digital and physical threats. With 60,000 networked devices generating massive data volumes, hospitals cannot discuss security without assessing threat actors and vulnerabilities. The multiplication is simple: if any factor reaches zero, risk disappears. But all factors are rising.

Security professionals must shift from technical controls to resilience conversations.

In this session, Torkel Thune, head of department - technology, architecture and AI at Oslo University Hospital, will share insights on:

• Understanding data value and classification to inform proportionate security investments;
• Building incident response capabilities before implementing technical controls;
• Integrating cyber resilience with physical security and emergency preparedness planning.