Case study · Regional hospital
Care that can’t pause.
A 24×7 security operations center for clinical and business systems, with playbooks written around patient care.
The brief
A regional hospital had more than a thousand endpoints, clinical systems that could not simply be isolated, and no security coverage at night.
What we did
- Build
A 24×7 operations center
Round-the-clock monitoring across clinical and business systems.
- Write
Playbooks for patient care
Each one distinguishes “contain now” from “contain carefully: a clinician is using this”.
- Drill
Until escalation is instinct
The on-call team rehearsed until the playbook was the reflex.
The result
- 24×7
- Coverage, nights and weekends included
- 1,000+
- Endpoints monitored
- Scripted
- Incidents followed a playbook, not a scramble
The same operating model later served an energy operator with industrial control systems, under ISO 27001.
The lesson
Where systems can’t simply be switched off, the response plan matters as much as the detection.