Healthcare facilities must understand their cyber risk and respond with continuous diligent cyber security just as they run the core business, according to an article on the Becker's ASC Review website.
Organizations should begin with an honest and cyber-threat-informed risk assessment that looks at information, technology and human stakeholders.
Many attacks are starting with interaction with a human; some security reports have estimated more than 70 percent of attacks in recent years began with an email.
These are simple strategies that every organization can afford, the article said.
By tackling the biggest risks first, an organization's security situation can gradually improve over time, until it eliminates most of the threats.