Southcentral Foundation is an Alaska Native-owned nonprofit health care corporation serving more than 70,000 Alaska Native and Native American patients across over 40 clinics and facilities in Alaska. Founded in 1982, the organization operates more than 80 health programs with a workforce of over 3,000 employees. Its Nuka System of Care - a comprehensive model of health care redesign - earned the Malcolm Baldrige National Quality Award in both 2011 and 2017.
For security practitioners, the threat model here is healthcare-specific and high-stakes: protecting sensitive patient data across a distributed clinical infrastructure, managing compliance across dozens of facilities, and securing systems that directly support continuity of care for a medically underserved population. The attack surface spans outpatient and inpatient services at regional scale, with the regulatory pressures - HIPAA, tribal data sovereignty considerations - that come with handling protected health information for indigenous communities.
The organization's cyber posture has to account for a large employee base accessing clinical systems, an 80-plus program portfolio generating diverse data flows, and a geographic footprint stretched across Alaska's remote infrastructure. Security teams working here aren't defending a startup's cloud-native stack - they're protecting operational technology in clinics, EHR systems, and the institutional knowledge embedded in a care model recognized internationally. The mission compounds the technical complexity: a breach doesn't just mean data exposure, it erodes trust in a system built on community-ownership principles.
