Medical device network segmentation is incomplete — some devices can reach the corporate network - Legacy systems (Windows Server 2012 R2, CentOS 7) are difficult to patch - Shadow IT: Several departments have deployed unauthorized SaaS applications - Physician resistance to security controls that s