Greater Baltimore Medical Center, Inc.

GBMC HealthCare operates a 275-bed medical center in Towson, Maryland, processing over 23,000 admissions and 50,000 emergency department visits annually. The system also runs GBMC Health Partners, a network of more than 300 primary care providers and specialists, and Gilchrist, a nationally recognized serious illness and end-of-life care program serving over 7,500 patients each year. Founded in 1965, the organization employs approximately 3,900 staff with nearly 1,000 physicians on its roster. For cybersecurity practitioners, healthcare threat models are dense by default: protected health information (PHI) under HIPAA, connected medical devices, sprawling EHR integrations, and a workforce spanning clinical, administrative, and remote-care contexts. The attack surface includes everything from emergency department intake systems to hospice care coordination platforms. Regulatory pressure is constant - data breaches in this sector carry mandatory reporting timelines, OCR investigations, and reputational costs that hit patient trust directly. GBMC's geographic footprint covers Baltimore County and Baltimore City, anchoring a community-facing healthcare system rather than a research institution. Security teams in environments like this work across endpoint hardening, network segmentation between clinical and administrative domains, identity and access management for a rotating cast of residents and contractors, and incident response workflows that must account for patient safety as a first-order constraint. The scope is operational and continuous - securing a system where downtime isn't an SLA issue but a care-delivery one.