Jefferson Health

Zelis is modernizing the healthcare financial experience with a connected platform that bridges the gaps and aligns interests across payers, providers, and healthcare consumers. Serving more than 750 payers including the top five national health plans, regional health plans, and TPAs, Zelis processes payments for 750,000 healthcare providers and serves nearly 100 million consumers. With $1.4 billion in revenue and 22% year-over-year growth, Zelis delivers measurable results through its comprehensive platform spanning network analytics, payment integrity, and payment optimization solutions. Founded in 1995 as Stratose, Zelis has grown through strategic acquisitions to become a leading healthcare payments company. The platform processes billions in provider payments annually, optimizes claims pricing across the entire financial journey, and delivers real-time insights to reduce costs and administrative burden. From its 2400+ professionals across 7 US offices and a global capability center in Hyderabad, Zelis continues to transform how the business of healthcare works, creating a more seamless financial system for all participants.

OhioHealth is a nationally recognized, not-for-profit healthcare system that has served Ohio communities since 1891. Headquartered in Columbus, the organization spans 47 Ohio counties with 11 hospitals, more than 50 ambulatory sites, hospice, home-health services, and a dedicated research institute. With more than 35,000 associates, physicians, and clinical professionals, OhioHealth has grown from a single hospital built with private funds to become one of the nation's leading faith-based healthcare systems and a healthcare outreach of the United Methodist Church. As a High Reliability Organization, OhioHealth is committed to achieving zero preventable harm and being the most-trusted, easiest-to-use healthcare system in the country. The OhioHealth Research Institute, established in 2006, has become a national leader in facilitating medical breakthroughs with a team of over 80 healthcare experts conducting clinical trials in oncology, heart and vascular care, and neuroscience. Through its Foundation, OhioHealth reinvests all earnings into patient care, funding research, equipment, medical education, and community outreach programs that serve populations across a 40-county area.

Northwell Health operates as New York State's largest healthcare provider and private employer, running 28 hospitals and more than 1,000 outpatient facilities across the state. Founded in 1997 through the merger of North Shore Health System and Long Island Jewish Medical Center, the organization now employs over 104,000 team members and treats more than 2 million patients annually. The scale of operations spans clinical care, hospital operations, outpatient services, oncology, cardiovascular medicine, medical education, and research - creating a substantial digital attack surface that requires protecting patient data, medical devices, hospital networks, and research systems across a geographically distributed footprint. The organization's technical infrastructure supports both acute-care hospital operations and a vast ambulatory network delivering non-inpatient clinical services. This dual environment presents distinct security challenges: real-time clinical systems where availability is critical, electronic health records systems handling sensitive patient information at scale, medical IoT devices integrated across facilities, and research data requiring protection while enabling collaboration. The threat model includes ransomware targeting hospital operations, patient data exfiltration, medical device vulnerabilities, insider threats across a workforce exceeding 100,000, and supply chain risks inherent in healthcare technology ecosystems. As a nonprofit integrated healthcare network with explicit commitments to community health access and medical innovation, Northwell's security posture must balance robust protection with operational realities of healthcare delivery. The organization's focus on advancing medical education and research adds complexity around academic partnerships, data sharing protocols, and protecting intellectual property. Security teams operate within regulatory frameworks including HIPAA and state privacy laws while supporting clinical workflows that cannot tolerate the downtime or friction common in other industries.

Ramsay Health Care is Australia's largest private hospital operator, delivering world-class healthcare since 1964. Founded by Paul Ramsay AO, the company has grown from a single psychiatric facility to a multinational network operating more than 70 hospitals, day surgeries, clinics and surgical centres across Australia, with additional operations in Europe and the United Kingdom. Each year, more than one million Australians trust Ramsay with their health, supported by a workforce of over 34,000 dedicated professionals who embody 'The Ramsay Way' - a philosophy of people caring for people that prioritizes clinical excellence, compassion, and putting patients first. The organization provides comprehensive medical services spanning acute care, surgical procedures, maternity, mental health, rehabilitation, and allied health. Ramsay operates facilities in urban and regional communities, ensuring accessible high-quality care nationwide. Beyond hospital walls, Ramsay Home Health delivers multidisciplinary community and home-based care, while Ramsay Health Plus provides rehabilitation and wellness services. The company invests significantly in research, clinical trials, and innovation, collaborating with specialists through Communities of Practice in cancer, orthopaedics, cardiology and mental health. This commitment to advancement, combined with sustainable growth practices under the Ramsay Cares initiative, positions Ramsay as a leader in private healthcare delivery both domestically and internationally.

We're a nonprofit community health care system that's been serving our mountain communities since 1965. What started as a small clinic to support the ski resort has grown into a 56-bed hospital with 24/7 emergency care, a helipad, and comprehensive medical services including cancer care, cardiovascular services, orthopedics, and behavioral health. We're locally operated and governed by a volunteer board of directors, which means we stay connected to the unique needs of Eagle County and our surrounding communities. Our mission is straightforward: elevating health across our mountain communities. We've expanded beyond our main hospital in Vail to include urgent care clinics, specialty centers, and the new Precourt Healing Center for behavioral health - the only inpatient facility between Denver and Salt Lake City. We're not just treating illness; we're working to become a model for integrated care that meets people where they are, whether they're locals who've lived here for generations or visitors from around the world exploring our mountains.

Emory Healthcare operates 11 hospitals and a clinically integrated network serving 26,000 employees across Georgia - which means the attack surface is sprawling. The threat model here is healthcare-standard: HIPAA compliance, ransomware targeting clinical systems, and the operational risk of downtime in environments where EHR access, imaging systems, and connected medical devices directly impact patient outcomes. With 3,800 physicians and over 50 specialty areas generating protected health information at scale, data segmentation and access control aren't theoretical - they're daily operational requirements. The security function supports both clinical operations and the research side of an academic health system tied to Emory University. That dual mandate means protecting patient data while enabling collaboration across research networks, which introduces federation and data-sharing complexity. The infrastructure spans legacy hospital IT, modern cloud services for analytics, and operational technology in clinical settings - ventilators, infusion pumps, imaging equipment - all of which require different threat modeling than standard enterprise environments. Established in 1997 and expanded through the Emory Healthcare Network since 2011, the organization has been consolidating what were once independent hospitals into a unified system. That history suggests ongoing integration work: harmonizing security policies, centralizing identity management, and standardizing tooling across acquisitions. The scale and regulatory environment demand mature incident response, vulnerability management across heterogeneous systems, and the ability to operate under the assumption that you're a target.