Privacy & Security
While leadership changes present challenges, Cliff Steinhauer, information security and engagement director at the National Cybersecurity Alliance, says the need for robust cybersecurity coordination will push both parties to cooperate next year.
Adam Green, partner at the law firm Davis Wright Tremaine, offers some perspective on how healthcare buyers should approach documentation for potential red flags.
Troy Adams, cyber engagement specialist at the U.S. Department of Health and Human Services, says Scattered Spider suspects are between 19 and 22 - and deploy sophisticated ransomware such as ALPHV Black Cat, used on Change Healthcare.
Tom Leary, senior vice president and head of government relations at HIMSS, says every government in every country is concerned with protecting data and training its workforce to be prepared for a cyberattack.
No textbook is required when real-life cyber risks are this serious, says Laquan Black, assistant professor of health information technology at Guttman Community College CUNY.
Heather Costa, Mayo Clinic's director of technology resilience, says that "we can never mitigate risk to zero and still have the business be operational."
Ian Mack, IT senior security analyst for the University of Virginia and the communications chair for the HIMSS Virginia Chapter, says those efforts can save lives and chart the direction of future initiatives.
Anahi Santiago, chief information security officer at ChristianaCare, says the architecture to develop security programs is shifting as providers manage a larger number of partners in the supply chain and in hospital at home programs.
Dr. Benoit Desjardins, professor at the University of Montreal, explains that attacks haven't changed. The interconnectedness of hospitals with each other and third parties means that, when one is impacted, the entire health system can be affected.
George Pappas, healthcare cybersecurity expert and CEO of Intraprise Health, says HIPAA is just a baseline for new state regulations that include incident reporting within 72 hours.
