By Des Moloney – This article looks at why healthcare organizations should treat identity and access management as an organizational risk rather than simply an IT responsibility. It outlines five key questions organizations should answer for every identity to improve ownership, reduce access risk, and build a more sustainable identity program.
Read More
By Victor Kuznetsov – A healthcare system should never make users choose between a clean interface and an honest record. Show the current answer. Preserve the history. Treat the correction itself as data.
By Zac Amos – With strategic implementation, BYOD (Bring Your Own Device) can support clinicians who work across different healthcare settings and need efficient access to approved tools. However, personal devices can also introduce security risks. Hospital IT teams should establish clear safeguards that protect healthcare information while allowing employees to use their devices appropriately.
By Matt Fisher – While the pace of settlements announced by the Office for Civil Rights has slowed significantly in the past year and a half, the newest one announced on August 27, 2026 brings the right of access under HIPAA back to the fore.
By Steve Akers – Healthcare security programs were built around an assumption that no longer holds everywhere: that a human sits on the other end of an attack, working at human speed and making human mistakes. That is why the Five Eyes intelligence alliance, in a joint advisory this past June, told member nations plainly that the timeline for adversaries to reach this level of capability is not years. It is months.
By Mark Ferrari – Healthcare has gotten very good at producing third-party risk scores. We have platforms, dashboards, questionnaires, and assessments that can generate a number for almost any vendor relationship. Leaders like scores. They are simple. They are comparable. They fit into a dashboard and offer a way to simplify the risk of a vendor population that keeps growing.
By Angel Mena MD – The health systems that reinforce their operational foundation with consolidated tools, shared data, and regularly examined workflows will be better positioned to deploy AI, maximize its potential, and be more resilient for the industry regulations and financial pressures ahead.
By Lionel Litty – The incidents that slip past an organization’s defenses show up as a routine email, an ordinary link, or a file that looks exactly like the hundreds of legitimate ones an employee opens every week. Across healthcare organizations, security teams are discovering that attacks bypassing every layer of their stack trace back to the same entry point: the browser session.
By Jim Kirk – Healthcare organizations are gaining more visibility into their cybersecurity risks, but identifying vulnerabilities is only the first step. Fortified Health Security’s 2026 Mid-Year Horizon Report examines the growing gap between risk detection and remediation, and the foundational areas healthcare leaders must prioritize to strengthen cyber resilience.