Privacy & Security (261)

The need for robust coordination on cybersecurity threats will push both parties to cooperate in 2025 despite leadership changes, says Cliff Steinhauer, information security and engagement director at the National Cybersecurity Alliance.

Hospitals need to effectively utilize their cybersecurity staff with the various functions needed and decide what should be outsourced, says Lee Kim, senior principal of cybersecurity and privacy at HIMSS.

Adam Greene, attorney and partner at Davis Wright Tremaine, advises healthcare buyers on documentation for any potential red flags.

Scattered Spider suspects are between 19 and 22 and use sophisticated ransomware such as ALPHV Black Cat that was used on Change Healthcare and others, says Troy Adams, cyber engagement specialist at the U.S. Department of Health and Human Services.

Laquan Black, assistant professor of Health Information Technology at Guttman Community College CUNY, says HIMSS Healthcare Cybersecurity Forum allows her to bring real-world issues back to the classroom.

Every country, every government is concerned with protecting data and training its workforce to be prepared for a cyberattack, says Tom Leary, senior vice president and head of government relations at HIMSS.

The architecture to develop security programs is shifting as providers manage a larger number of partners in the supply chain and in hospital at home programs, says Anahi Santiago, CISO at ChristianaCare.

HIPAA is a baseline to new regulations that include incident reporting within 72 hours, says George Pappas, healthcare cybersecurity expert and the CEO of Intraprise Health.

The Healthcare Cybersecurity Forum affirms reasons for those efforts, including saving lives and directing future initiatives, says Ian Mack, IT senior security analyst for the University of Virginia and HIMSS Virginia Chapter communications chair.

There's been a shift in thinking from preparing for a physical disaster to being ready for any disruption, including cyberattacks, says Heather Costa, Mayo Clinic's director of Technology Resilience.

Lee Kim, senior principal for cybersecurity and privacy at HIMSS, explains some of the sometimes surprising ways privacy and security intersect with health access, patient engagement and education.

The attacks haven't changed but the interconnectedness of hospitals with each other and third parties means when one is impacted, the entire health system can be affected, says Dr. Benoit Desjardins, a professor at the University of Montreal.