Irrelevant. I.T failed in preventing him from doing it,
Agreed. I have never worked in a place (hospital or otherwise) where an end user could expose an internal service to the public.
HR failed
That pretty much sums up HR in general.
Drs. can afford their own private internet connection,
out of curiosity, how do you think this would work? A doctor is at the hospital, needs network access and.....has the phone company install a phone line in each of the wards she is rounding in? The "learning shit" is kinda important...like looking up the proper drug dose for a particular patient population, new diagnostic criteria, etc...
many docs think they are experts at computers. A minority actually are. Thus looks like a guy playing sysadmin who get left holding the dookie from incompetent net admins