SouthEast Alaska Regional Health Consortium

Zelis is modernizing the healthcare financial experience with a connected platform that bridges the gaps and aligns interests across payers, providers, and healthcare consumers. Serving more than 750 payers including the top five national health plans, regional health plans, and TPAs, Zelis processes payments for 750,000 healthcare providers and serves nearly 100 million consumers. With $1.4 billion in revenue and 22% year-over-year growth, Zelis delivers measurable results through its comprehensive platform spanning network analytics, payment integrity, and payment optimization solutions. Founded in 1995 as Stratose, Zelis has grown through strategic acquisitions to become a leading healthcare payments company. The platform processes billions in provider payments annually, optimizes claims pricing across the entire financial journey, and delivers real-time insights to reduce costs and administrative burden. From its 2400+ professionals across 7 US offices and a global capability center in Hyderabad, Zelis continues to transform how the business of healthcare works, creating a more seamless financial system for all participants.

Community Health Systems operates 69 affiliated hospitals and approximately 1,000 sites of care across 14 states, managing more than 10,000 beds and serving millions of patients annually. Founded in 1985 with a single hospital purchase in Plano, Texas, the Franklin, Tennessee-based company has grown into a Fortune 500 healthcare provider led by CEO Kevin J. Hammons. The organization focuses on community-focused hospitals, particularly in underserved areas, delivering clinical services through a network that requires coordination across multiple state regulatory environments and patient data systems. The company's technical infrastructure supports hospital operations and management, modern medical technology deployment, and physician recruitment and staffing across its multi-state footprint. Operating at this scale means managing electronic health records, diagnostic systems, and networked medical devices across dozens of facilities - each a potential attack surface requiring consistent security protocols, compliance with HIPAA and state-level healthcare regulations, and protection of sensitive patient data. The distributed nature of the network, spanning community hospitals that may have varying levels of IT maturity, creates complexity in maintaining uniform security postures and incident response capabilities. Healthcare providers of this size face persistent threats from ransomware operators who target patient care systems, data exfiltration attempts aimed at protected health information, and supply chain vulnerabilities in medical devices and third-party software. The organization's commitment to deploying modern medical technology across its network means continuously evaluating and securing new clinical systems, managing legacy infrastructure that can't be immediately replaced, and ensuring that security measures don't interfere with clinical workflows where seconds matter. The challenge is operational: protecting distributed infrastructure while maintaining the availability requirements of hospitals that never close.

In 1905, Dr. Simeon Bell donated land to establish academic medicine in Kansas City, leading to the founding of the hospital in 1906. This visionary gift set in motion more than a century of medical innovation and patient care excellence. In 1998, The University of Kansas Hospital became an independent authority, and in 2017, it joined with The University of Kansas Physicians to form The University of Kansas Health System. This transformation created an integrated academic medical center with the unique ability to combine world-class patient care with groundbreaking research and education. Today, The University of Kansas Health System stands as the region's premier academic medical center and a destination for complex care and diagnosis. The organization's physicians are not just caregivers - they're researchers and educators expanding the boundaries of medical knowledge and developing life-changing treatments. From Kansas's only nationally verified Level I trauma center to specialized institutes for heart care, transplantation, and cancer treatment, the health system offers advanced capabilities that few hospitals can match. Guided by core values of excellence, compassion, diversity, innovation, integrity, and evidence-based decision-making, the team remains committed to their founding vision: to lead the nation in caring, healing, teaching, and discovering.

Ensemble Health Partners is the leading revenue cycle management company for hospitals, health systems, and physician practices in the United States. The company manages more than $46 billion in net patient revenue and ranks #1 in revenue cycle managed services, partnering with more unique health systems than any other revenue cycle firm. Under CEO Judson Ivy, Ensemble operates at the intersection of healthcare finance and operational technology, deploying AI-powered systems to accelerate collections, reduce claim denials, and optimize revenue performance across complex payer landscapes. The technical infrastructure combines managed services, artificial intelligence–enabled technology, and process optimization to handle the financial backbone of healthcare delivery. Ensemble's operational model integrates specialized talent, proven processes, and technology platforms to manage patient revenue cycles end-to-end - from initial billing through collections and denial management. The company claims to meet 100% of year-one client goals and exceed 102% of year-one cash collections targets, with an average 5% net patient revenue lift across its client base. For technical professionals, the environment involves navigating regulatory compliance frameworks, payer system integrations, and data security requirements inherent to healthcare revenue operations. The revenue cycle domain spans patient access, charge capture, claims processing, payment posting, and accounts receivable management - all requiring robust data pipelines, API integrations with multiple payer systems, and secure handling of protected health information. Ensemble's approach emphasizes bridging gaps in client technology stacks and talent pools, positioning the company as infrastructure for healthcare organizations that need to compete at scale while maintaining margin discipline.

Community Health Systems operates an extensive network of hospitals and healthcare facilities across the United States through subsidiary companies, while also providing management services to numerous independent hospital operators. The organization's infrastructure spans nationwide, creating hundreds of career opportunities across diverse medical settings - a scale that generates significant data protection obligations and regulatory compliance requirements inherent to healthcare IT operations. The company positions patient well-being and operational excellence as core priorities, which in healthcare translates directly to protecting electronic health records, ensuring HIPAA compliance, and maintaining the availability of clinical systems. With subsidiaries operating facilities independently and management services touching external hospital operators, the threat surface includes both centralized infrastructure and distributed endpoints across multiple entities - each requiring coordinated security controls, incident response capabilities, and compliance monitoring. Community Health Systems emphasizes professional development and career pathways for staff advancement, indicating investment in workforce specialization. For security professionals, this suggests opportunities to develop expertise across healthcare-specific domains: medical device security, HL7 and FHIR protocol implementations, ransomware defense in clinical environments, and the particular challenges of securing legacy systems that can't be patched without extensive validation. The organization's focus on creating environments designed for professional growth aligns with the reality that healthcare security demands continuous learning as threat actors increasingly target hospital networks for both financial gain and operational disruption.

Northwell Health operates as New York State's largest healthcare provider and private employer, running 28 hospitals and more than 1,000 outpatient facilities across the state. Founded in 1997 through the merger of North Shore Health System and Long Island Jewish Medical Center, the organization now employs over 104,000 team members and treats more than 2 million patients annually. The scale of operations spans clinical care, hospital operations, outpatient services, oncology, cardiovascular medicine, medical education, and research - creating a substantial digital attack surface that requires protecting patient data, medical devices, hospital networks, and research systems across a geographically distributed footprint. The organization's technical infrastructure supports both acute-care hospital operations and a vast ambulatory network delivering non-inpatient clinical services. This dual environment presents distinct security challenges: real-time clinical systems where availability is critical, electronic health records systems handling sensitive patient information at scale, medical IoT devices integrated across facilities, and research data requiring protection while enabling collaboration. The threat model includes ransomware targeting hospital operations, patient data exfiltration, medical device vulnerabilities, insider threats across a workforce exceeding 100,000, and supply chain risks inherent in healthcare technology ecosystems. As a nonprofit integrated healthcare network with explicit commitments to community health access and medical innovation, Northwell's security posture must balance robust protection with operational realities of healthcare delivery. The organization's focus on advancing medical education and research adds complexity around academic partnerships, data sharing protocols, and protecting intellectual property. Security teams operate within regulatory frameworks including HIPAA and state privacy laws while supporting clinical workflows that cannot tolerate the downtime or friction common in other industries.