3rd-Party risk, Asset Management Continue to be Cybersecurity Weak points for Healthcare, Study Find

Supply chain risks and asset management remain key areas in need of improvement among healthcare’s cybersecurity efforts, according to a recent report benchmarking dozens of organizations.The collaborative analysis, penned by KLAS Research, echoed earlier editions that found most healthcare organizations are “preparing for when, not if, they will need to employ incident response, disaster recovery and business continuity strategies.”But beyond spotting the gaps, it also outlined correlations between self-reported implementation of cybersecurity frameworks and best practices with relevant organizational metrics. For instance, it found lower annual increases in cybersecurity insurance premiums for healthcare organizations that use the NIST Cybersecurity Framework 2.0 (NIST CSF 2.0)— which is recommended by the federal government and private sector partners for HIPAA compliance—as their primary framework.