If you don't know what you have, you cannot fix it. That foundational lesson drove eight years of asset discovery work at University Health Network - a system spanning five hospitals, 28 remote sites and two educational institutions. A sterilizer washer running Windows 7 that showed up as an unidentified PC on the network, a ransomware-infected device that took hours to locate, and unmanaged devices with access to 90% of the network all pointed to the same root cause: visibility cannot be assumed.

This session, led by Kajeevan Rajanayagam, director of cyber security, will cover:

• How UHN built a structured asset discovery and ownership program across 28-plus sites;
• How VLAN segmentation, vendor access controls and RFP-embedded security requirements reduce risk from third-party and legacy devices without disrupting clinical operations;
• Why security exception management without automated expiry tracking creates compounding long-term risk.