Cybersecurity


Your Identity Inventory Is a Risk Assessment

By Des Moloney – This article looks at why healthcare organizations should treat identity and access management as an organizational risk rather than simply an IT responsibility. It outlines five key questions organizations should answer for every identity to improve ownership, reduce access risk, and build a more sustainable identity program.


When Attackers Bring AI, Healthcare Security Needs a Human in the Loop

By Steve Akers – Healthcare security programs were built around an assumption that no longer holds everywhere: that a human sits on the other end of an attack, working at human speed and making human mistakes. That is why the Five Eyes intelligence alliance, in a joint advisory this past June, told member nations plainly that the timeline for adversaries to reach this level of capability is not years. It is months.


Seeing The Score, Missing The Risk

By Mark Ferrari – Healthcare has gotten very good at producing third-party risk scores. We have platforms, dashboards, questionnaires, and assessments that can generate a number for almost any vendor relationship. Leaders like scores. They are simple. They are comparable. They fit into a dashboard and offer a way to simplify the risk of a vendor population that keeps growing.


Trust is the New Attack Surface in Healthcare

By Lionel Litty – The incidents that slip past an organization’s defenses show up as a routine email, an ordinary link, or a file that looks exactly like the hundreds of legitimate ones an employee opens every week. Across healthcare organizations, security teams are discovering that attacks bypassing every layer of their stack trace back to the same entry point: the browser session.