Securing the connected devices on Fairhaven Regional Medical Center's floor, where safety and availability come first: a floor plan split into zones — an ICU with infusion pumps and patient monitors, imaging allowed only to PACS and its vendor, a plant room of ninety building controllers, a lobby whose fish-tank thermometer now sits on its own guest zone, a corridor jack that requires 802.1X, and a security room of 41 cameras. Beside it, the inventory says 1,400 devices while the network holds about 6,000; a pump's baseline is one server on port 443; and findings are closed with the device owners — unique camera credentials, a key per controller, and zones so a compromise stays put without unplugging a pump mid-infusion.

CY-MID-062Mid Level · IoT Security

IoT Security — The Device Floor

A technical, field-driven course on securing the connected devices a hospital runs but cannot treat like computers — infusion pumps, monitors, cameras, building systems — across eight attack surfaces, under the first-order constraint that no control may harm a patient or take a life-supporting device offline.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Discover an agentless device estate with passive, safety-first techniques; fingerprint unknowns; and build an owned, clinical-impact-tiered inventory that separates observation from inference.
Work the technical surfaces — identity (credentials, certificates, NAC), firmware (the patch gap, secure boot, SBOMs), and radio (MQTT/BLE/BACnet, plaintext) — with compensating controls where devices can't be fixed.
Contain devices with segmentation and least privilege, and monitor them agentlessly with behavioral baselines and network detection — responding to compromise without taking a life-supporting device offline.
Run the lifecycle and govern the program: secure onboarding, drift and end-of-life management, procurement, the biomed partnership, and a safety-first culture that puts do-no-harm above every control.

Price:৳8,000