Children's Healthcare of Atlanta

Children's Healthcare of Atlanta operates three hospitals across Georgia, offering more than 60 pediatric specialties and subspecialties to infants, children, and teens. As a not-for-profit, it serves a patient population that can't advocate for its own data - and the attack surface is real: EHR systems, connected medical devices, billing infrastructure, and research databases all sit in scope.

The threat model for a pediatric health system isn't abstract. Ransomware targeting healthcare has surged, and the operational impact here extends beyond downtime - delays in care for critically ill children are the actual risk. Securing a network that spans multiple hospital campuses, outpatient facilities, and affiliated research operations means defending identity, endpoints, and clinical workflows simultaneously.

The organization is also engaged in pediatric research, which introduces additional data governance requirements around sensitive datasets. Security teams operating in this environment work across compliance frameworks specific to healthcare, manage vendor risk across a sprawling medical device ecosystem, and build controls around systems where availability is genuinely life-safety.