> What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? Give them a remediation time of 24 hours. If that doesn'

> What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? Give them a remediation time of 24 hours. If that doesn't help, cut them off anyway, as that's the only thing that will force management to give their IT people actual staff and budget. Hospital IT is almost always a shitshow and that won't change until external pressure forces management's hand.