Cris Ewell

CSO and CPO, NRC Health

Ewell, PhD, is CISO at University of Washington Medicine. Previously, he was CISO of Seattle Children's Hospital. Before that, he served as the director of information security operations at the University of Washington, chief security officer for PEMCO Corp. and chief technology officer for Breakwater Security.

First Responders and the Response to Cybersecurity Concerns

Presented by Cris Ewell • March 2, 2021

Washington State was the first U.S. epicenter of the COVID-19 pandemic, and as CISO of UW Medicine Cris Ewell was supporting the first responders. How is his security organization most different today than it was a year ago? Hear his approach to: Work from anywhere Supply chain risk Medical device security

CISO's Perspective: Managing Third-Party Risks

Presented by Cris Ewell • May 20, 2019

Managing risks are part of a robust information security program. Our organizations have come to depend on a complex network of third-party relationships. Reliance on third-parties can drive performance, but also pose significant risks. Many organizations are still struggling to effectively manage their third-party...

Secure Health Information Exchange

Presented by Cris Ewell , Mitch Parker • April 11, 2019

The federal government says it will scrutinize healthcare providers and health IT vendors that participate in so-called "information blocking." But what are the top technical challenges and other barriers in ensuring that health information is being appropriately, legally and securely shared with clinicians, patients...

Identity and Access Management - So Many Breaches and So Many Stolen Identities

Presented by Cris Ewell , Jigar Kadakia • April 10, 2019

What approaches are healthcare entities taking with their credentialing and IAM to better verify and manage the identities of patients, clinicians, researchers, vendors and others who want or need access to health and other critical data? Our panelists Cris Ewell, CISO at UW Medicine and Jigar Kadakia, CISO and chief...

Incident Response - Practice Makes Perfect - Before an Incident

Presented by Cris Ewell , Michael Theis • July 16, 2015

The absolute worst time to develop a breach response plan is directly after you have discovered a breach. The absolute best way to have your response team fail is to have them untrained on rarely practiced procedures while being overly reliant upon expensive, improperly configured technology. It is proven that humans...