How Inova Health Systems Integrated 45,000 Devices with a Construction Governance Framework
In this presentation from the January 2026 NexusCast, Peter O'Connor, IT Director at Inova Health System, and Sia Dabiri, Senior Associate at Altura, explain how a top-tier health system is finally closing the "construction loophole" that has allowed unvetted OT devices onto networks for decades. Managing a high-stakes environment with 45,000 devices and five hospitals, O'Connor addresses the critical need for standards in an era where everything from elevators to water treatment systems now demands IP connectivity. The session details the rigorous vetting process and shared governance model required to ensure that patient safety and life-safety systems remain resilient against evolving cyber risks. You will see how Inova is applying these new standards to 1.5 million square feet of active hospital construction to prevent the Wild West of loose engineering specifications from creating single points of failure.
Nexus Pro members will learn the tactical details of Inova’s cybersecurity guidelines, including a unique $10 million cyber liability requirement for contractors that ensures accountability from day one. O'Connor and Dabiri reveal a real-world catch where a vendor submittal requested a 10-year-old discontinued operating system, underscoring why every construction submittal must be vetted by a Master Systems Integrator (MSI). You will discover Inova’s strict "no third-party network" policy, which includes a clean glove approach to vendor laptops to prevent outside malware from touching the clinical environment. This recording is a vital roadmap for any facility leader or IT director looking to move beyond buying blindly and start enforcing enterprise-grade standards across their entire portfolio.
Watch the full recording inside Nexus Pro →
In this presentation from the January 2026 NexusCast, Peter O'Connor, IT Director at Inova Health System, and Sia Dabiri, Senior Associate at Altura, explain how a top-tier health system is finally closing the "construction loophole" that has allowed unvetted OT devices onto networks for decades. Managing a high-stakes environment with 45,000 devices and five hospitals, O'Connor addresses the critical need for standards in an era where everything from elevators to water treatment systems now demands IP connectivity. The session details the rigorous vetting process and shared governance model required to ensure that patient safety and life-safety systems remain resilient against evolving cyber risks. You will see how Inova is applying these new standards to 1.5 million square feet of active hospital construction to prevent the Wild West of loose engineering specifications from creating single points of failure.
Nexus Pro members will learn the tactical details of Inova’s cybersecurity guidelines, including a unique $10 million cyber liability requirement for contractors that ensures accountability from day one. O'Connor and Dabiri reveal a real-world catch where a vendor submittal requested a 10-year-old discontinued operating system, underscoring why every construction submittal must be vetted by a Master Systems Integrator (MSI). You will discover Inova’s strict "no third-party network" policy, which includes a clean glove approach to vendor laptops to prevent outside malware from touching the clinical environment. This recording is a vital roadmap for any facility leader or IT director looking to move beyond buying blindly and start enforcing enterprise-grade standards across their entire portfolio.
Watch the full recording inside Nexus Pro →


.png)

This is a great piece!
I agree.