Not working in healthcare (because they're an insidious industry preferring to hire those with "healthcare" experience instead of those who can help them </rant>) - why aren't these systems protected with the same vigor as any other nationally critical resource? Why aren't they under the purview of the Department of Homeland Security (DHS) like the energy sector is? Maybe HHS (Health and Human Services - the federal department managing US healthcare) should consult with the DHS to adopt their standards for Cyber Security and start treating IT systems responsible for delivering healthcare as critical resources. These clowns have screwed up enough times already - and yes, I'm a bit sore because they refuse to hire anyone from outside their industry, including those of us coming from an environment where we manage and provision systems that are critical to national security.