1
00:00:02,943 --> 00:00:04,713
Welcome to the Cyber Trapps Podcast.

2
00:00:04,713 --> 00:00:15,863
I'm Jethro Jones, your host, and we are here at the beautiful Gonzaga Campus once again for the Inch 360 Conference, and we're talking to several people as part of that today we have Brent Borchert from MultiCare.

3
00:00:15,863 --> 00:00:18,833
And Brent, do you want to tell us a little about who you are and what you do?

4
00:00:19,088 --> 00:00:19,478
Sure.

5
00:00:19,848 --> 00:00:22,008
So as you said, my name is Brat Borchardt.

6
00:00:22,068 --> 00:00:35,558
I currently have the pleasure to serve for MultiCare as the regional IT leader for our Inland Northwest region, which covers the Spokane area and our Central Washington region, which is the Yakima valley at this point.

7
00:00:35,948 --> 00:00:36,248
Yeah.

8
00:00:36,308 --> 00:00:39,418
And so what does that mean as the IT regional leader?

9
00:00:40,093 --> 00:00:51,853
So I spend quite a bit of time with our business leaders for each region, which is typically hospital presidents chief medical officers, chief nursing executives, et cetera.

10
00:00:52,603 --> 00:00:59,713
And we do a lot of work to align IT, support for delivering care to patients

11
00:00:59,863 --> 00:01:00,073
Managing

12
00:01:00,193 --> 00:01:03,643
business objectives in our particular model.

13
00:01:04,153 --> 00:01:07,233
Our IT systems are centralized.

14
00:01:07,233 --> 00:01:20,273
So if you think about your end user compute folks, or your application teams or whatever, they actually report up through different teams that are run in a central manner so that we have consistency and process and standard and things like that.

15
00:01:20,783 --> 00:01:23,593
And I have dotted relationships to those

16
00:01:23,638 --> 00:01:23,908
groups.

17
00:01:24,038 --> 00:01:30,548
For regional oversight to help prioritize response to issues or projects that need to be executed, et cetera.

18
00:01:30,863 --> 00:01:31,133
Yeah.

19
00:01:31,313 --> 00:01:31,673
Okay.

20
00:01:32,153 --> 00:01:37,353
And so, medical information, cybersecurity and healthcare is a big issue.

21
00:01:37,353 --> 00:01:44,913
There's all kinds of issues with your, just your information being out there, number one, but then also fraud and things like that.

22
00:01:44,913 --> 00:01:46,983
What are the things that are most pressing to you?

23
00:01:47,613 --> 00:01:48,963
Today in 2025

24
00:01:49,748 --> 00:01:50,738
certainly.

25
00:01:51,863 --> 00:01:56,433
The ability to run the business is pretty top

26
00:01:56,853 --> 00:01:57,783
that might be up there.

27
00:01:57,873 --> 00:01:58,443
Yeah.

28
00:01:58,443 --> 00:01:59,613
We've seen it a lot.

29
00:01:59,613 --> 00:02:14,133
I mean, ransomware's not a new thing, but it's, it still exists the bad guys know that if we're losing money every day 'cause we can't serve patients or a hospital can't be open or whatever it might be paying the ransom starts to look really good.

30
00:02:14,133 --> 00:02:14,523
Yeah.

31
00:02:15,103 --> 00:02:15,613
So.

32
00:02:15,683 --> 00:02:20,513
That ability to still operate is very high on the list.

33
00:02:20,993 --> 00:02:24,773
Data loss related to a breach is obviously still important.

34
00:02:24,883 --> 00:02:31,253
If you are found negligent, you can get fines from the regulators, et cetera, et cetera.

35
00:02:31,673 --> 00:02:34,993
But from a business standpoint disruption to operations is.

36
00:02:35,458 --> 00:02:41,338
Is far more important these days we've seen what happens when people can't run.

37
00:02:41,338 --> 00:02:43,708
I think it was scripts a year or two ago.

38
00:02:43,708 --> 00:02:48,238
They were down for something like seven or eight weeks, like not serving patients right.

39
00:02:48,748 --> 00:02:53,043
And that's a pretty scary thought when you think about you know, people who need healthcare.

40
00:02:53,968 --> 00:02:54,658
Pretty quickly

41
00:02:54,683 --> 00:02:54,973
Yeah.

42
00:02:55,228 --> 00:02:57,258
and not being able to deliver that.

43
00:02:57,258 --> 00:03:06,618
So, that to me, I think is still one of the top objectives for how we structure our information security and cyber risk resilience programs.

44
00:03:06,828 --> 00:03:07,188
Yeah.

45
00:03:07,428 --> 00:03:08,388
That's fascinating.

46
00:03:08,928 --> 00:03:16,308
It's one of those things that you don't normal people probably don't think much about, and yet that's what you've gotta deal with on a regular basis.

47
00:03:16,803 --> 00:03:27,383
Yeah, it's it's not unlike your typical utilities, everybody expects to be able to flip the switch and the light comes on hit your tap and water comes out.

48
00:03:27,923 --> 00:03:35,453
Or if I need to go to the emergency room because I broke my arm, that it's there it's available and it will work.

49
00:03:35,833 --> 00:03:39,023
And that I'll be safe and treated well and all that sort thing.

50
00:03:39,023 --> 00:03:45,026
So, there's definitely a view toward healthcare being considered critical infrastructure for society.

51
00:03:45,356 --> 00:03:45,646
Yeah.

52
00:03:46,871 --> 00:03:47,441
Interesting.

53
00:03:47,591 --> 00:03:50,641
So, what brings you to the conference today?

54
00:03:50,881 --> 00:03:52,171
What are you hoping to get out of it?

55
00:03:52,796 --> 00:03:58,596
So first I have a relationship already with Heather and I'm super supportive of.

56
00:03:59,256 --> 00:04:08,656
Her desire to educate the world on how to be better stewards when it comes to protecting yourself, protecting the organizations that you work with.

57
00:04:09,256 --> 00:04:13,716
And I love having the opportunity to connect with regional folks.

58
00:04:14,706 --> 00:04:17,551
spread the good word, help people remember that.

59
00:04:17,836 --> 00:04:19,326
It's a fight worth fighting.

60
00:04:20,016 --> 00:04:26,976
And sometimes it feels like you can't win, but every day that a bad guy is foiled is the day that we won, is fantastic.

61
00:04:27,606 --> 00:04:38,656
And particularly when I think about you know, the next generation stepping into the realm, so to speak, being defenders of the data that we all seem to put everywhere now.

62
00:04:39,296 --> 00:04:43,386
I think it's a really great opportunity for folks to see.

63
00:04:43,806 --> 00:04:51,636
What is being done to date and to generate new ideas about how to better protect ourselves and, the organizations that we support.

64
00:04:52,131 --> 00:04:52,521
Yeah.

65
00:04:52,521 --> 00:05:01,721
And I think that conferences like this, especially local, regional ones that are not like the National Cybersecurity Conference or some big huge one.

66
00:05:01,721 --> 00:05:15,026
This is really focused locally here in Spokane, which makes it really valuable and and worthwhile for those of us that are here because we can talk to other people who are dealing with the same kind of things that we are.

67
00:05:15,086 --> 00:05:16,226
And I think really important.

68
00:05:16,226 --> 00:05:25,616
And I learn a ton every time I do these podcasts where I'm figuring out what exposure people have, what they're learning, what they're doing to defend against it, and all that kind of stuff.

69
00:05:25,666 --> 00:05:28,846
It's really valuable for this local appeal, even though.

70
00:05:29,416 --> 00:05:31,696
You know, some organizations are really big.

71
00:05:31,696 --> 00:05:31,756
Yeah.

72
00:05:32,236 --> 00:05:41,596
We're still individual people who live in a place and regardless of how big the organization may or may not be, it can impact real lives right here, close to home.

73
00:05:41,596 --> 00:05:42,676
Anything you wanna add to that?

74
00:05:42,966 --> 00:05:53,336
Yeah, I think it's easy as a PR practitioner in any domain to, to sort of idolize feedback from the Giants, right?

75
00:05:53,636 --> 00:05:58,856
go to a conference like this and you're like, I want to hear from Google or Microsoft or Amazon or whatever.

76
00:06:00,086 --> 00:06:04,636
are definitely smart people there and there are definitely cool stories they have to share.

77
00:06:05,176 --> 00:06:13,786
But your local county leadership also has really cool stories to tell about, Hey we have a limited budget and we still have to go do the same things.

78
00:06:13,786 --> 00:06:16,486
Here's how we got creative about attacking these problems.

79
00:06:17,056 --> 00:06:26,246
Where you get to see in some cases how smaller organizations across the region might band together to have like a united front against something.

80
00:06:26,246 --> 00:06:31,476
I know there's some really cool examples in Michigan where the University of Michigan Health.

81
00:06:32,311 --> 00:06:43,451
Security team basically built a SOC to be used by a bunch of local, regional folks, and they all had rotating staff that would be incident responders on the soc.

82
00:06:43,451 --> 00:06:47,351
Like they just made it up none of 'em wanted to pay for their own service.

83
00:06:47,351 --> 00:06:58,841
Like the, those kinds of things that think are really cool to, to show what people can do and to build connectedness within community, specifically in something really hard, like fighting cybersecurity, where.

84
00:06:59,216 --> 00:07:04,356
You can feel pretty isolated or under-resourced or that it's kind of a hopeless kind of thing.

85
00:07:04,836 --> 00:07:11,586
And this kind of thing is just fantastic for bringing some sunshine to that part of the way that we do our work./

86
00:07:12,786 --> 00:07:14,406
So, so if I may, and.

87
00:07:15,171 --> 00:07:16,551
We can delete this out if you want.

88
00:07:16,701 --> 00:07:18,891
But here's one of my frustrations.

89
00:07:19,041 --> 00:07:27,381
I, my, I feel like my medical data for me and my family is owned by whatever provider I see.

90
00:07:27,921 --> 00:07:33,596
And so I have a a MyChart by whatever that big company is in Epic.

91
00:07:33,841 --> 00:07:34,861
Epic in Wisconsin.

92
00:07:34,861 --> 00:07:36,601
I've actually been to their campus.

93
00:07:36,606 --> 00:07:36,676
Yeah.

94
00:07:37,121 --> 00:07:38,291
It's like Disneyland, right?

95
00:07:38,411 --> 00:07:39,491
It's crazy.

96
00:07:40,301 --> 00:07:45,381
So, so that's cool that I have a chart available.

97
00:07:45,381 --> 00:07:47,241
I can go communicate with my doctor and stuff.

98
00:07:47,571 --> 00:07:56,481
But my frustration is that if I go to Providence for something and then I go to MultiCare for something, which my insurance accepts both, then I have two different accounts.

99
00:07:56,601 --> 00:08:04,141
And so, for example I had an ear infection and went to a MultiCare thing, but my primary doctor is is Providence.

100
00:08:04,381 --> 00:08:04,981
And so.

101
00:08:05,516 --> 00:08:17,496
She didn't know that I had this ear infection and didn't show up in my chart, and I would like me to own my healthcare information and not my providers.

102
00:08:17,776 --> 00:08:18,676
What are your thoughts on that?

103
00:08:19,256 --> 00:08:24,656
Yeah, so one, you're a hundred percent correct in the sense that you own your data.

104
00:08:24,786 --> 00:08:35,196
We talk about it regularly as this idea that we are simply stewards of our patients, our employees data.

105
00:08:35,316 --> 00:08:43,236
And as part of that role, we're expected to protect it and do all the right things, which includes giving it to you you want

106
00:08:43,746 --> 00:08:44,196
that too.

107
00:08:44,346 --> 00:08:46,686
Updating it if there's a, mistake.

108
00:08:46,746 --> 00:08:47,076
Right.

109
00:08:47,226 --> 00:08:51,276
And a lot of this is actually called out in regulation that says like, we have to do it.

110
00:08:51,281 --> 00:08:51,531
Yeah.

111
00:08:51,666 --> 00:08:56,706
It is a it's a challenge in the healthcare industry in general.

112
00:08:56,736 --> 00:08:57,096
Right.

113
00:08:57,096 --> 00:08:57,936
Which is.

114
00:08:59,871 --> 00:09:06,501
We're all required to take all these steps to protect our data, which means we don't want to share it freely.

115
00:09:06,771 --> 00:09:07,071
Yeah.

116
00:09:07,341 --> 00:09:07,851
Right?

117
00:09:08,241 --> 00:09:08,961
And

118
00:09:09,081 --> 00:09:09,381
there

119
00:09:09,381 --> 00:09:12,921
have not been, this all boils down to business and in

120
00:09:13,101 --> 00:09:13,461
and my

121
00:09:13,851 --> 00:09:19,341
perspective, there have not been adequate incentives put in place for creating.

122
00:09:20,751 --> 00:09:22,911
What you would call one health record, right?

123
00:09:22,941 --> 00:09:29,751
Which is like, it exists in one place and it doesn't matter where you go, anybody can look at it, it's all the same data.

124
00:09:30,231 --> 00:09:38,661
In some senses you get that sort of thing in a single like payer healthcare you look at the or Canada, right?

125
00:09:38,661 --> 00:09:40,431
It's the government system.

126
00:09:41,271 --> 00:09:43,786
long as you're in the government system, which is like everywhere.

127
00:09:44,331 --> 00:09:47,541
Like you have that course in the United States there are a lot of strong feelings

128
00:09:47,646 --> 00:09:48,786
That sort of direction.

129
00:09:49,236 --> 00:09:57,336
I think that is kind of the nirvana from patient standpoint of I don't have to worry about where I am.

130
00:09:58,086 --> 00:09:59,616
can just see anything.

131
00:09:59,646 --> 00:10:03,846
My doctor has access to everything regardless of whether they're my doctor.

132
00:10:03,846 --> 00:10:04,086
Right?

133
00:10:04,086 --> 00:10:11,181
Like other examples of that are, Hey, I'm on vacation in Florida Disney World with my kids.

134
00:10:11,991 --> 00:10:18,081
And I go to the doctor, they're not gonna have, in all likelihood, access to your medical record.

135
00:10:18,141 --> 00:10:18,351
Yeah.

136
00:10:18,351 --> 00:10:21,201
I'm gonna fill out 20 pages of medical

137
00:10:21,681 --> 00:10:21,951
right.

138
00:10:21,951 --> 00:10:26,191
And they're gonna ask you like well, you like let's say you go in for chest pains, Yeah.

139
00:10:26,191 --> 00:10:29,791
And they're gonna be like, well, what's your family's history heart disease?

140
00:10:29,791 --> 00:10:32,401
And like, what's your blood pressure been over the last 10 years?

141
00:10:32,401 --> 00:10:32,551
Right.

142
00:10:32,581 --> 00:10:33,841
They're gonna want all this information.

143
00:10:33,841 --> 00:10:34,411
They don't have it.

144
00:10:34,951 --> 00:10:39,041
So, to a large extent healthcare practitioners would love that too.

145
00:10:39,146 --> 00:10:42,296
It's just better data for making a decision.

146
00:10:42,836 --> 00:11:01,906
I likelihood of it happening probably pretty low something changes kind of from a federal regulatory standpoint where they basically just say,
look, we're gonna make it required that there is in essence, a centralized exchange for healthcare data, which obviously creates a ton of.

147
00:11:02,356 --> 00:11:09,526
Risk sense that all of a sudden you're putting everything in one place and a very attractive target for bad guys.

148
00:11:09,631 --> 00:11:09,841
Yeah.

149
00:11:09,841 --> 00:11:09,931
But

150
00:11:10,456 --> 00:11:14,096
yeah, I, it's a consistent frustration

151
00:11:15,026 --> 00:11:15,866
patients.

152
00:11:16,466 --> 00:11:22,106
And I mean, even just basic stuff of like, I'm changing my doctor

153
00:11:22,436 --> 00:11:22,786
Uhhuh

154
00:11:23,441 --> 00:11:25,571
And you gotta get stuff over.

155
00:11:25,696 --> 00:11:25,986
Yeah.

156
00:11:26,451 --> 00:11:27,141
It's challenging.

157
00:11:27,141 --> 00:11:33,531
You sign a bunch forms and even just the way they move the data isn't always very user friendly for the doctor.

158
00:11:33,621 --> 00:11:33,861
Right.

159
00:11:34,341 --> 00:11:40,371
Which is like, well we gave it you, but it's all basically in like a PDF format, as an attachment in the record.

160
00:11:40,821 --> 00:11:43,071
So you have to open it up and read through eight pages

161
00:11:43,121 --> 00:11:43,251
yeah.

162
00:11:43,611 --> 00:11:43,971
to see

163
00:11:43,971 --> 00:11:45,891
if it's a simple record, you know?

164
00:11:45,936 --> 00:11:46,596
That's right.

165
00:11:46,701 --> 00:11:49,311
That's Heaven forbid there's any complications.

166
00:11:49,311 --> 00:11:49,491
Yeah.

167
00:11:49,551 --> 00:11:49,791
Exactly.

168
00:11:50,271 --> 00:11:50,511
Yeah.

169
00:11:50,511 --> 00:11:51,411
That's very interesting.

170
00:11:51,411 --> 00:12:01,371
Well I don't expect that we'll solve that problem today, but but it is good to know that you're aware of it from your perspective and that that is something that people are at least thinking about.

171
00:12:01,371 --> 00:12:05,991
And I think what you said before that the incentives are not there for that to exist yet.

172
00:12:06,091 --> 00:12:14,411
And I don't know what the right incentives are yet, but you might have some ideas what kind of incentives would be, would get that to move the needle.

173
00:12:14,606 --> 00:12:18,326
So my first thought is some sort of financial incentive.

174
00:12:18,396 --> 00:12:22,026
Every, I won't say every healthcare is a very challenging,

175
00:12:24,336 --> 00:12:25,536
vertical right now.

176
00:12:25,716 --> 00:12:29,696
It's difficult to break even costs continue to go up.

177
00:12:29,846 --> 00:12:31,586
There are challenges with labor.

178
00:12:31,751 --> 00:12:34,111
There are obviously challenges with.

179
00:12:34,381 --> 00:12:37,381
Reimbursement rates from like Medicare and Medicaid, right?

180
00:12:37,591 --> 00:12:40,771
Healthcare organizations lose money on that kind of care.

181
00:12:41,581 --> 00:12:48,941
So if you made it financially attractive, I think you'd get a lot more people going, Hey, that would be great.

182
00:12:49,631 --> 00:12:53,441
In all likelihood, this is me putting on my futurist hat.

183
00:12:54,161 --> 00:13:01,121
Those changes come because of some sort of regulatory requirement, which it'll make people do it, but.

184
00:13:01,466 --> 00:13:10,046
They don't do it as willingly and you'll end up with lots of ways to do, just enough to box, right?

185
00:13:10,211 --> 00:13:10,481
Yeah.

186
00:13:10,706 --> 00:13:17,236
And course there will be all this circling around like, well, what does it mean to share our data and how much do we have to share?

187
00:13:17,776 --> 00:13:19,076
you know, gets a little silly.

188
00:13:19,426 --> 00:13:22,546
To me those are the, only two things that would really drive it.

189
00:13:22,686 --> 00:13:23,046
'Cause if.

190
00:13:23,826 --> 00:13:29,946
it's not required and it costs me money or costs me some sort of market share or business advantage, I'm gonna do it.

191
00:13:31,041 --> 00:13:32,511
Yeah, that makes total sense.

192
00:13:32,941 --> 00:13:34,171
Well, Brent, this was awesome.

193
00:13:34,171 --> 00:13:39,291
Thanks for taking the time to chat with me and thanks for all that you're doing here in the community and for MultiCare as a whole.

194
00:13:39,516 --> 00:13:39,846
Awesome.

195
00:13:40,056 --> 00:13:40,526
Thank you so much.

196
00:13:40,526 --> 00:13:40,836
Appreciate it.

197
00:13:40,861 --> 00:13:41,001
Yep.