Session ID: 

Securing a Picture Archiving and Communication System (PACS)

3:00pm - 4:00pm Tuesday, February 12
Orlando - Orange County Convention Center


This session demonstrates how to secure a picture archiving and communication system ecosystem in healthcare delivery organizations (HDOs). The PACS Use Case, developed in collaboration with health information technology (IT) vendors at the National Cybersecurity Center of Excellence (NCCoE), covers methods for providing increased security benefits while minimizing the impact and availability to a PACS and other components. The outcome results in a repeatable, scalable example implementation solution that HDOs can integrate into their current infrastructures. Understanding the importance of improving control and management of a PACS can limit exposures to a threat vector that could act as a point where an attack may be performed or serve as a pivot point into an integrated healthcare information system, thereby improving an HDO’s cybersecurity posture.

Learning Objectives: 

  • Demonstrate how healthcare delivery organizations can use a solution developed by the NCCoE to secure their PACS
  • Evaluate risks associated with threats and vulnerabilities related to the PACS and the vast
  • Manage applied knowledge of how to implement similar security controls in existing HDO ecosystems
  • Discuss the NIST Cybersecurity Framework and medical device standards incorporated in the PACS Project


Healthcare IT Project Manager,
Cybersecurity Engineer,
Nccoe / MITRE


IT Professional