SSH instead of Telnet, SFTP instead of FTP, IMAPS instead of IMAP > - **Network segmentation** with microsegmentation where possible > - **Encrypted medical protocols** — TLS-wrapped HL7v2, DICOM TLS, FHIR over HTTPS > > Additionally, deploy network taps and SPAN ports to your own monitoring infrast