# The Life and Death Stakes of Healthcare Cybersecurity | #DTF038 Page: https://stenobird.com/podcast/dtf-cyber-podcast-7304144/the-life-and-death-stakes-of-healthcare-cybersecurity-dtf038 Text version: https://stenobird.com/podcast/dtf-cyber-podcast-7304144/the-life-and-death-stakes-of-healthcare-cybersecurity-dtf038.md Podcast: [DTF Cyber Podcast](https://stenobird.com/podcast/dtf-cyber-podcast-7304144) Published: 2026-03-16T13:00:00+00:00 Episode link: https://cyberpodcast.net Audio file: https://episodes.captivate.fm/episode/31a25723-e19e-4d5c-bc85-a62ad28694de.mp3 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/dtf-cyber-podcast-7304144/episodes/the-life-and-death-stakes-of-healthcare-cybersecurity-dtf038 Duration seconds: 3881 ## Resource In Episode 38 of the DTF Cyber Podcast, Fern and Troy welcome Healthcare CISO, Bob Schlotfelt. We dive into why an incident at a hospital is fundamentally different from a retail breach. While Damian is out, Bob brings decades of insight into protecting patient safety over just protecting data. We discuss the nightmare of unpatchable medical devices, why compliance doesn't equal security, and the hilarious (but effective) ways to get a nurse's attention for security training. Chapter Markers: •⁠ ⁠00:00 - Intro: Netflix vs. Banks vs. Hospitals •⁠ ⁠01:46 - Introducing Bob, Healthcare CISO •⁠ ⁠08:38 - The Threat to Connected Medical Devices •⁠ ⁠18:50 - Fixing "Operational Friction" on the Hospital Floor •⁠ ⁠34:06 - Security Awareness in the Bathroom Stalls? •⁠ ⁠43:09 - Why Compliance (HIPAA) is NOT Security. •⁠ ⁠1:01:00 - Telling Truth to Power: Boardroom Advice. http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned. ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/dtf-cyber-podcast-7304144/episodes/the-life-and-death-stakes-of-healthcare-cybersecurity-dtf038/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/dtf-cyber-podcast-7304144/the-life-and-death-stakes-of-healthcare-cybersecurity-dtf038.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.