David Finn, executive vice president of strategic innovation at CynergisTek, a cybersecurity consulting firm, suggests that healthcare providers should take a reasoned, common sense approach to developing a cybersecurity program, according to an article on the Search Health IT website.
Finn suggested providers scale their security programs and understand they're not going to fix everything at once.
Healthcare providers should prioritize risks, determine what is most important to the organization and then start building it.
Every organization should have a designated security person, but the technology risks come down each staffer. People leave their machines logged on or click on email that they shouldn't, Finn said.
5 Reasons Engineering is the Edge in Healthcare Master Planning
Building an AI-Ready Healthcare Facility 
Family Medical Associates of Raleigh Reports April 2026 Data Breach
Every Detail Matters: A Patient's Story of Healing, Hope and Healthcare Facilities
Geisinger Wyoming Valley Medical Center Tops Off New 11-Story Tower