Expert analysis shows ‘good’ cyber-resilience no longer meets today’s risks


 In a compelling op-ed, industry experts argue that the current benchmark of "good" cybersecurity is dangerously insufficient given the evolving threat landscape. Citing a CHIME survey, the article reveals a concerning gap: while IT teams often rate their detection capabilities highly, business leaders and non-IT staff lack confidence in their ability to respond to a breach. This disconnect creates a fragility in the organization's overall resilience.


The piece emphasizes that resilience must evolve to address the "human element," requiring comprehensive training that goes beyond phishing tests to include full-scale operational continuity drills. It calls for a cultural shift where security is viewed not as a compliance checklist, but as a continuous, adaptive process involving every employee.


Read the original article at: https://histalk2.com/2025/05/12/readers-write-healthcare-cyber-resilience-in-2025-why-good-isnt-good-enough/



Follow us on Instagram, Twitter, and Facebook to stay up to date with what's new in healthcare all around the world.

Comments

Post a Comment

Popular posts from this blog

South African pathology giant Lancet Laboratories fined R100,000 for failing to adequately report multiple data breaches

Image
  The Information Regulator of South Africa has issued an enforcement notice and a fine of R100,000 against Lancet Laboratories for its failure to adhere to the Protection of Personal Information Act (POPIA). The regulator cited the pathology group for neglecting to notify both the regulatory body and the affected data subjects in a timely manner following multiple security compromises. This enforcement action highlights a growing global trend where regulators are moving beyond penalizing the breach itself to strictly punishing failures in transparency and incident response protocols. For international health organizations operating in multi-jurisdictional environments, this serves as a reminder of the strict liability associated with breach notification timelines. The regulator explicitly criticized Lancet’s lack of urgency, noting that the delay in notification denied patients the opportunity to take protective measures against identity fraud. The penalty underscores that effecti...
Read more

Clinicians using public AI tools without approval—cyber risks ahead

Image
A growing trend reveals that clinicians are turning to readily available, public-facing AI tools and Large Language Models (LLMs) (such as general-purpose chatbots) for clinical assistance without formal institutional approval. This phenomenon, known as "Shadow AI," poses immediate and severe cybersecurity and compliance risks . When patient data is copied or pasted into a public LLM, that data is transferred to a third-party server that is not covered by a Business Associate Agreement (BAA) and is not HIPAA-compliant. This practice results in an instant HIPAA violation and leads to accidental data exposure without triggering firewalls or alerts. Experts warn that Shadow AI has quickly become the most overlooked threat in digital health. Health systems must urgently implement clear governance policies to restrict the use of non-approved AI tools and instead offer validated, secure, and institutionally monitored LLM resources. The solution lies not in banning AI, but in i...
Read more

Cybersecurity in Healthcare insights: 27th Nov- 3rd Dec 2025

Image
  New US federal security standards prompt healthcare cybersecurity overhaul Proposed updates to federal healthcare cybersecurity standards, introduced in late 2024, represent the first major overhaul of the HIPAA Security Rule in decades. These changes, aimed at addressing modern threats like AI and quantum computing, mandate that HIPAA-covered entities implement rigorous measures such as data encryption, multifactor authentication, and regular security audits. Crucially, they also require written procedures to restore critical systems within 72 hours of an incident. While necessary, compliance comes with a steep price tag, HHS estimates first-year costs at approximately $9 billion. This financial burden poses a significant challenge for smaller hospitals lacking the resources of large health systems. To bridge this gap, experts suggest leveraging staff augmentation through managed service providers (MSPs) and adopting AI-driven threat detection tools to enhance security without e...
Read more