MHA Keystone Center PSO Hosts Cybersecurity and Regulatory Inspection Safe Table Events

L-R: Max Kwiecien

The MHA Keystone Center Patient Safety Organization (PSO) hosted a safe table focused on Adapting Clinical Risk Management for Cybersecurity June 4 at the MHA Headquarters in Okemos. In partnership with MHA Endorsed Business Partner CyberForce|Q, the session provided practical insights into building and strengthening a cybersecurity program through effective risk management and strategic planning. Attendees explored how to identify and address cybersecurity risks, recognize gaps in current systems and incorporate cybersecurity into organizational budgets and strategic planning.

Safe tables are valuable opportunities for hospital team members to come together, share ideas with peers, engage in safety discussions and obtain advice to improve or eliminate harm. These events are unique in offering a legally protected confidential environment for discussing sensitive topics.

In addition, registration is still available for the virtual safe table Regulatory Inspections: A Strategic Approach scheduled 11:30 a.m. to 1 p.m. June 17. In partnership with the Alliance for Quality Improvement and Patient Safety, this session will guide participants in preparing for regulatory authority visits. Attendees will explore best practices for protecting and disclosing Patient Safety Work Product. The discussion will also focus on how participants can implement CMS Patient Safety Structural Measures and participate in PSOs using Patient Safety Act protections.

Members with questions may reach out to the MHA Keystone Center.

MHA Keystone Center PSO to Host Two Safe Tables in June

The MHA Keystone Center Patient Safety Organization (PSO) will host two upcoming safe table events in June focused on cybersecurity risk management and regulatory inspections. These events offer healthcare leaders an opportunity to engage in discussions to improve patient safety and reduce harm.

Adapting Clinical Risk Management for Cybersecurity Safe Table scheduled from 12:30 to 4 p.m. June 4 at the MHA Headquarters in Okemos. In partnership with MHA Endorsed Business Partner CyberForce|Q, this session will provide practical insights into building and strengthening a cybersecurity program through effective risk management and strategic planning. Attendees will explore how to identify and address cybersecurity risks, recognize gaps in current systems and incorporate cybersecurity into organizational budgets and strategic planning.

Regulatory Inspections: A Strategic Approach Virtual Safe Table scheduled 11:30 a.m. to 1 p.m. June 17 will be hosted virtually. In partnership with the Alliance for Quality Improvement and Patient Safety, this session will guide participants in preparing for regulatory authority visits. Attendees will explore best practices for protecting and disclosing Patient Safety Work Product. The discussion will also focus on how participants can implement CMS Patient Safety Structural Measures and participate in PSOs using Patient Safety Act protections.

Participants will learn to recognize regulatory risks, prepare for inspections and understand the role of structural measures in patient safety improvement.

Chief quality officers, chief nursing executives, chief medical officers, chief information services officers, directors of quality improvement, patient safety and risk management are encouraged to register for both safe tables.

Nursing and risk management credits are being pursued for both events.

What is a Safe Table?

Safe tables are valuable opportunities for hospital team members to come together, share ideas with peers, engage in safety discussions and obtain advice to improve or eliminate harm. These events are unique in offering a legally protected confidential environment for discussing sensitive topics.

Members with questions may reach out to the MHA Keystone Center.

MHA Keystone Center PSO to Host Cybersecurity Safe Table

The MHA Keystone Center Patient Safety Organization (PSO) and MHA Endorsed Business Partner CyberForce|Q, will host a Safe Table event focused on adapting clinical risk management practices for cybersecurity. The session will be held from 12:30 to 4 p.m. Wednesday, June 4, at MHA headquarters in Okemos. CyberForce|Q specializes in cybersecurity risk management best practices to hospitals and assists them in implementing increased cybersecurity measures to improve their cybersecurity posture.

The presentation will provide practical insights into building and strengthening a cybersecurity program through effective risk management and strategic planning. The presenter will discuss how to identify, assess and manage cybersecurity risks and key components that should be included in any comprehensive security program. The session will cover how to recognize gaps in existing approaches and provide guidance on how to implement improvement tactics that enhance an organization’s overall posture. The facilitator will also share best practices on how to strategically approach information technology (IT) interventions and align cybersecurity efforts with organizational goals through effective budgeting and long-term planning.

Participants will engage in an interactive incident response tabletop exercise led by the participant success leader at CyberForce|Q. This hands-on exercise will provide a practical understanding of incident response strategies in a cybersecurity context.

Attendees will learn how to:

  • Conduct risk management for cybersecurity.
  • Identify key items to include in their cybersecurity program.
  • Determine cybersecurity gaps and improvement tactics.
  • Facilitate IT Interventions.
  • Include cybersecurity into organizational budgeting and strategic planning.

Members with questions may contact the MHA Keystone Center PSO.

MHA and Partners Host Cybersecurity Tabletop for UP Healthcare Leaders

Attendees during the Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop Oct. 14 in Escanaba, MI with MHA Endorsed Business Partner (EBP) CyberForce|Q and the Region 8 Healthcare Coalition.

The MHA hosted the Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop Oct. 14 in Escanaba, MI with MHA Endorsed Business Partner (EBP) CyberForce|Q and the Region 8 Healthcare Coalition as part of the ongoing effort to strengthen cybersecurity.

CyberForce|Q representatives Alex Sabin, technical success leader, and Terrance McCoy, participant success engineer, guided participants through a simulated cybersecurity incident impacting a hospital system. The scenario was designed to test and refine an organization’s Incident Response Plan (IRP) while addressing the unique challenges of securing sensitive healthcare environments.

“We are grateful to work with CyberForce|Q on the tabletop exercises and healthcare security operations center (HSOC),” said Mike Nowak, chief information security officer at the MHA. ”Beyond strengthening the MHA’s security, CyberForce|Q has demonstrated a strong commitment to collaborating on offerings that benefit our members. The tabletop exercises provide practical experience and tools – and you can network and talk to people that are dealing with similar issues. I encourage all healthcare organizations to increase their security posture in light of recent cyber-attacks.”

Workshop attendees experienced a sense of challenge during the tabletop exercises, identifying potential unnoticed gaps in an Incident Response Plan. They engaged in hands-on group activities, providing a tangible understanding of potential cyber-attacks and enabling collaborative discussions within teams to refine decision-making processes and procedures. Additionally, they gained a profound understanding of the critical significance of roles, responsibilities, and communication protocols in effective incident response.

Learn more about the MHA’s partnership with CyberForce|Q from John Kelley, regional sales director – Midwest. Members with questions should contact Rob Wood at the MHA.

MHA Hosts Successful Cybersecurity Tabletop

MHA Events
Attendees and presenters during the Tabletop Training and Incident Response Workshop at the MHA Headquarters.

The MHA hosted the Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop May 22 with MHA Endorsed Business Partner (EBP) CyberForce|Q. CyberForce|Q representatives Alex Sabin, technical success leader, and Terrance McCoy, participant success engineer, guided participants through three critical phases of a simulated cyber-attack:

  1. Intricacies of social engineering aimed at the IT Help Desk.
  2. Complexities of living-off-the-land attacks.
  3. Challenges of detecting and preventing data exfiltration techniques.

Workshop attendees experienced a sense of challenge during tabletop exercises, identifying potential unnoticed gaps in an Incident Response Plan. They engaged in hands-on group activities, providing a tangible understanding of potential cyber-attacks and enabling collaborative discussions within teams to refine decision-making processes and procedures. Additionally, they gained a profound understanding of the critical significance of roles, responsibilities and communication protocols in effective incident response.

With over 25 years of experience in providing cybersecurity services, CyberForce|Q has developed and implemented quantifiable programs that assess and execute safety measures for organizations of all sizes, with proven results. Learn more about the MHA’s partnership with CyberForce|Q from John Kelley, regional sales director – Midwest.

Members with questions should contact Rob Wood at the MHA.

MHA Monday Report May 13, 2024

House Advancing Medicaid Budget Highlights Legislative Work

The Michigan House of Representatives advanced its state fiscal year 2025 Michigan Department of Health and Human Services budget recommendations during the week of May 5. Importantly, the chamber’s budget recommendation continues vital …


MHA EventsMHA Annual Membership Meeting Registration Deadline Approaching

The registration deadline is May 24 for the MHA Annual Membership Meeting June 26 through 28 at the Grand Hotel on Mackinac Island. The MHA Annual Membership Meeting is an opportunity to learn, network and …


Highly Pathogenic Avian Influenza Preparedness and Resources

News of Highly Pathogenic Avian Influenza H5N1, commonly referred to as bird flu, is spreading across the country with concerns for animal-to-human transmission. The MHA and its partners are monitoring the situation closely with …


Registration Open for Caregiver Engagement Webinar

The MHA Keystone Center is hosting the Identifying and Engaging Family Caregivers Webinar at 1 p.m., Thursday, June 6. The event, facilitated by RUSH University’s Center for Excellence in Aging, is free to MHA members. …



 

MHA EventsMHA and CyberForce|Q In-Person Cybersecurity Workshop

The MHA is partnering with Endorsed Business Partner CyberForce|Q to offer the in-person workshop Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop from 9:00 a.m. to noon, May 22 at the MHA headquarters …


MHA EventsPublic Relations Professionals Gather at MHA Communications Retreat

The 2024 MHA Communications Retreat brought together nearly 100 communications, marketing and public relations professionals from MHA-member facilities May 7 to network and learn from peers across the state. Topics on the agenda included artificial …


MHA Hosts Successful Virtual Care Models Webinar

The MHA hosted nearly 100 healthcare staff in patient experience, nursing, quality and human resources roles May 2 during the webinar Virtual Care Models that Improve Engagement and Support Staff. Representatives from Henry Ford Health …


The Keckley Report

Is the Health System the Next Target for Campus Unrest?

“In my 4Q 2023 Keckley Poll, distinctions between the views of the college-age population and older adults about the health system were surprising: though college age adults use the health system less than others, they share a widespread belief it’s flawed and in need of fundamental change. They believe the profit in healthcare is more important than its caring and they’re open to government policies that might rein in its corporatization. …

The U.S. system is an unlikely target for campus unrest today but a likely target tomorrow. College student interaction with the health system is episodic: student health is a backstop for their bouts with depression, substance abuse, STIs, chronic conditions and accidents. Insurance and payment are concerns, and impressions from childhood household circumstances flavor their impressions of how the system operates. But what they’re seeing is key: the most heralded organizations in healthcare are associated with their size, financial success and the personal wealth of their executives. In college circles, Wall Street success seems more important than Main Street authenticity, transparency, environmental consciousness, fairness and humility. Like the majority of Americans, their views about the health system are anecdotal and regretfully negative. …”

Paul Keckley, May 6, 2024


News to Know

  • MHA Endorsed Business Partner Managed Care Advisory Group, Inc. provided an update on the Visa Mastercard class action settlement.
  • The MHA Keystone Center is partnering with the Michigan Regional Perinatal Quality Collaborative to offer an additional networking opportunity for members attending the Michigan Maternal & Infant Health Summit.
  • In partnership with the Michigan Department of Health and Human Services, the MHA Keystone Center developed a series of online learning modules for infection control and prevention education.

MHA CEO Brian PetersMHA in the News

U.S. Representative Haley Stevens (D-MI) issued a press release May 9 highlighting her introduction of the Stop Nurse Shortages Act that included a quote of support from MHA CEO Brian Peters. The bipartisan bill, introduced …

MHA and CyberForce|Q In-Person Cybersecurity Workshop

MHA Events

MHA EventsThe MHA is partnering with Endorsed Business Partner (EBP) CyberForce|Q to offer the in-person workshop Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop from 9:00 a.m. to noon, May 22 at the MHA headquarters in Okemos. Led by Alex Sabin, participant success leader, CyberForce|Q , the workshop will guide participants through an engaging, informative and interactive Incident Response Tabletop Exercise.

Throughout the workshop, attendees will explore three critical phases of a simulated cyber-attack:

  1. Intricacies of social engineering aimed at the IT Help Desk.
  2. Complexities of living-off-the-land attacks.
  3. Challenges of detecting and preventing data exfiltration techniques.

By attending this workshop, attendees will:

  • Experience a sense of challenge during tabletop exercises, leading to the identification of potential unnoticed gaps in an Incident Response Plan.
  • Engage in hands-on group activities that will provide a tangible understanding of potential cyber-attacks, enabling collaborative discussions within teams to refine decision-making processes and procedures.
  • Gain a profound understanding of the critical significance of roles, responsibilities and communication protocols in effective incident response.

With over 25 years of experience in providing cybersecurity services, CyberForce|Q has developed and implemented quantifiable programs that assess and execute safety measures for organizations of all sizes, with proven results. Providing a wide range of services to a diverse group of industries, including hospitals and healthcare, CyberForce|Q meets organizations where they are in their cybersecurity journey. Its goal is to enhance the current capabilities of its partners, utilizing technology-agnostic solutions that can be integrated with an organization’s current technologies and systems.

The event is free of charge and open only to MHA member organizations and invitees. Members are encouraged to register, as this event will only be held in-person and seating is limited. Light breakfast and refreshments will be provided. Registrations will be accepted up to one day before the event date, if space is available.

Members with questions should Rob Wood at the MHA. To learn more about CyberForce|Q, contact John Kelley, regional sales director – Midwest, CyberForce|Q.

MHA Monday Report May 6 2024


Medical Residents Converge for GME Capitol Day

The MHA Graduate Medical Education (GME) Capitol Day welcomed more than 40 physician residents from a dozen member hospitals to the MHA Capitol Advocacy Center offices May 1 for a day of meetings with members …


Medicaid Budget Bills Advance, Other Health Issues Move Forward

The House and Senate appropriations committees advanced recommendations during the week of April 28 for the Department of Health and Human Services as a part of the state fiscal year 2025 budget. The MHA is …


The Rural 340B Access Act of 2024 Introduced in the U.S. House

The bipartisan Rural 340B Access Act of 2024 was introduced April 29 in the U.S. House of Representatives. Introduced by Reps. Jack Bergman (MI-01) and Debbie Dingell (MI-06), the legislation aims to enhance the Rural …


speak upCorewell Health William Beaumont University Hospital Nurse Receives Q1 MHA Keystone Center Speak-up! Award

The Michigan Health & Hospital Association Keystone Center celebrated Jennie Lynn, RN, at Corewell Health William Beaumont University Hospital, April 30 as its quarterly MHA Keystone Center Speak-up! Award recipient. The quarterly MHA Keystone …


Registration Open for Safe Table on Structured Communication Models

The MHA Keystone Center Patient Safety Organization is hosting the Structured Communication Hand-Off Safe Table from 12:30 to 4 p.m., Wednesday, June 12 at the MHA headquarters in Okemos, MI. The peer-led discussion about …


MHA Keystone Center Offers Infection Control & Prevention Online Courses

The MHA Keystone Center partnered with the Michigan Department of Health and Human Services to create a series of online learning modules for infection control and prevention education. The modules cater to the needs …



MHA Podcast Explores Healthcare Cybersecurity with Michigan Medicine

The MHA released a new episode of the MiCare Champion Cast exploring what happens when a hospital or health system experiences a cyberattack featuring Jack Kufahl, chief information security officer at Michigan Medicine. In his …


MHA CEO Report — Implementing Behavioral Health Solutions

Behavioral health is one of the four key strategic pillars for the MHA this program year. The MHA Board of Trustees tasked our association with prioritizing the issue and to identify solutions that can make a meaningful difference for patients and …


The Keckley Report

Four Implicit Messages to Healthcare in the FTC Non-Compete Rule

“Last Tuesday (April 23), the Federal Trade Commission (FTC) issued a 570-page final rule in a partisan 3-2 vote prohibiting employers from binding most American workers to post-employment non-competition agreements (the “Final Rule”): …

Odds are this rule will not become law anytime soon allowing healthcare organizations to consider alternatives to the non-competes they use. Work-arounds for protection of intellectual property, talent acquisition, employment agreements are likely as HR professionals, benefits and compensation consultancies huddle to consider what’s next. …

What’s clear is that the FTC and regulators in DC and many states are watching the industry closely and many aren’t buying what we’re selling.”

Paul Keckley, April 29, 2024


News to Know

The Michigan Department of Licensing and Regulatory Affairs, Bureau of Professional Licensing is seeking new expert witnesses to review standard of care investigation cases.


MHA CEO Brian PetersMHA in the News

The MHA received media coverage the week of April 28 that includes coverage on the national shortage of radiologists and radiology technicians, recently introduced bills at the federal level and rural hospital challenges. Below is …

MHA Podcast Explores Healthcare Cybersecurity with Michigan Medicine

The MHA released a new episode of the MiCare Champion Cast exploring what happens when a hospital or health system experiences a cyberattack featuring Jack Kufahl, chief information security officer at Michigan Medicine.

In his role, Kufahl is responsible for planning, developing, implementing, and maintaining information assurance activities across the academic medical center. Although the health system wasn’t majorly impacted by the Change Healthcare breach, Kufahl shared how his team responded and valuable insight on how to improve cybersecurity measures.

“I think one of the most important things any hospital or healthcare organization can do is start establishing a long-term [cybersecurity] framework so that you can measure improvement over time,” said Kufahl, noting there are many accessible resources that accommodate monetary limitations.

According to the FBI, healthcare organizations are the top target of cybercriminals across the globe and attacks have increased significantly in the last two years. On top of the significant financial burden this can cause for a hospital, many face penalties that further threaten patient access to care – especially among small and rural providers serving vulnerable communities.

“Some companies don’t have the ability to invest in cybersecurity and hard choices have to be made,” said Kufahl, who also serves as one of the incorporating officers and board members of the Michigan Healthcare Cybersecurity Council. “If you penalize the victims of a cybersecurity crime, we’re not leveraging the legislative angle to our benefit.”

Fostering partnerships and collaborating is another way Michigan Medicine stays proactive in their cybersecurity efforts. Kufahl noted that working with CyberForce|Q, an MHA Endorsed Business Partner (EBP), helps his team regularly assess security programming and stay connected with a broad network of experts across industries.

“It is really important to not be alone in cybersecurity in healthcare,” said Kufahl. “The tone and temperature of collaborating across companies has improved dramatically…that is the most meaningful fabric we can reinforce. I would encourage anyone to reach out and engage.”

The MHA is partnering with CyberForce|Q to offer the Enhancing Your Cybersecurity: Tabletop Training and Incident Response Workshop 9 a.m. – Noon May 22. The in-person event is free of charge for MHA member organizations and invitees. Throughout the workshop, attendees will explore three critical phases of a simulated cyberattack.


The episode is available to stream on Spotify, Apple Podcasts, SoundCloud and YouTube. Those interested in learning more about CyberForce|Q or the MHA EBP program can visit the business services webpage or contact Rob Wood at the MHA. Questions or idea submissions for future MiCare Champion Cast episodes can be sent to Lucy Ciaramitaro at the MHA.

MHA Monday Report April 26, 2024

MHA Member Testifies on Healthcare Legislation, Staffing Agency Bill Introduced

Hills and Dales Hospital President and CEO Andrew Daniels testified April 25 in the House Health Policy Committee on legislation removing timelines on disposal of sharps containers. Senate Bill 482, which was initiated by …


MDHHS Announces $10 Million Maternal Health Reimbursement Opportunity

The Michigan Department of Health and Human Services (MDHHS) announced April 22 its intention to reimburse Michigan birthing hospitals for committing to participate in The Joint Commission Maternal Levels of Care Verification Program and …


CMS Seeks Comments on Proposed Transforming Episode Accountability Model

The Centers for Medicare & Medicaid Services (CMS) included a proposal to create a new mandatory alternative payment model, the Transforming Episode Accountability Model, in the fiscal year 2025 hospital inpatient prospective payment system …


LEO Launches Second Round of Going Pro Talent Fund Grants

The Michigan Department of Labor and Economic Opportunities (LEO) recently opened the second round of Going Pro Talent Fund grants, which will distribute a portion of the $11 million remaining from the first round of …


MHA EventsFinal Reminder: Register Now for the 2024 Communications Retreat

It is not too late to register for the 2024 MHA Communications Retreat, scheduled from 8:30 a.m. to 4 p.m. May 7 at the Henry Center for Executive Development in Lansing. Members are encouraged to …


Requests for Information Required for SLCGP Grant

The Michigan Cybersecurity Planning Committee is requesting additional information from applicants who previously expressed an interest in participating in the Fiscal Year 2022 State and Local Cybersecurity Grant Program Funds (SLCGP). This program aims to …


CMS Releases FY 2025 LTCH PPS Proposed Rule

The Centers for Medicare & Medicaid Services (CMS) recently released a proposed rule to update the Medicare fee-for-service long-term care hospital (LTCH) prospective payment system (PPS) for fiscal year 2025. Specifically, the rule proposes: …


The Keckley Report

Hospitals declare War on Corporate Insurance: Handicapping the Players

“At the Annual Meeting of the American Hospital Association in DC last week, its all-out attack on “corporate insurance” was a prominent theme. In the meeting recap, AHA CEO Rick Pollack made the influential organization’s case:

“This year, there was special focus on educating policymakers that our health care system is suffering from multiple chronic conditions. These include continued government underpayment, cyberattacks, workforce shortages, broken supply chains, access to behavioral health, and irresponsible behavior by corporate commercial health insurance companies, among others — that put access to services in serious jeopardy.” …

This war has been simmering. It’s now a blaze. The outcome is uncertain despite the considerable resources both will spend to win.”

Paul Keckley, April 22, 2024


News to Know

MHA Endorsed Business Partner Medical Solutions is hosting a free webinar Empowering Rural Care: Dynamic Staffing Solutions and Retention Methods from noon – 1 p.m. ET May 8 with special guest, Patti Artley, chief nursing officer at Medical Solutions.