Privacy & Security
Healthcare security incidents in 2024 highlighted third-party vendor risk and the need to prepare business continuity plans and tabletop exercises in case of attack, says Lee Kim, senior principal of cybersecurity and privacy at HIMSS.
Garrett Weber, Akamai Technologies field CTO for enterprise security, explains how the new HIPAA security rule requires healthcare organizations to use specific technical controls, but it can also help to better position third-party risk management.
A digital health literacy maturity model could aid in training and inspiring staff to adopt new tools and cybersecurity practices, says Tjasa Zajc, special advisor for HIMSS and moderator for the HIMSS25 Global Leaders Exchange panel.
With nearly 25% of all cyberattacks against healthcare organizations, Intraprise Health Chief Operating Officer Scott Mattila warns that artificial intelligence is enabling more sophisticated phishing and smishing tactics.
The HIMSS government relations team plans to work within the U.S. and with other countries on artificial intelligence, cybersecurity, digital health transformation and workforce development, says Tom Leary, SVP and head of government relations.
The model also underscores closed-loop processes, enhancing AI and telemedicine security, notes Dr Min-Che Tung, chief superintendent of Tungs' Taichung MetroHarbor Hospital.
At HIMSS25 Tamer Baker, Zscaler's healthcare chief technology officer, and Nate Couture, University of Vermont Health Network CISO, will share intel on attack vectors and how zero trust plays a part in preventing attacks.
Eric Avigdor, chief product officer of Votiro, says cutting-edge technology can reduce the cost of compliance and achieve a more efficient outcome.
Personal and medical data is very valuable to cybercriminals on the dark web, says Van Steel, shareholder in LBMC's cybersecurity division, who discusses his work with the HIMSS Tennessee chapter to help protect users' healthcare information.
At HIMSS25, Claroty's Ty Greenhalgh and St. Luke's University Health's Mike Powers will unveil the HSCC's updated MC2 Framework and address challenges in negotiating medical device cybersecurity contract provisions.