Third-Party Risk Considerations During COVID-19 Crisis

As healthcare organizations navigate the COVID-19 crisis, they should take critical steps to improve their security posture and third-party security risk governance, says consultant Brenda Ferraro, the former CISO at Meritain Health, an Aetna subsidiary.

“You need to start thinking about the different security controls that are important for the way we are living today,” says Ferraro, who now serves as a vice president at risk management firm Prevelant.

That means keeping in mind the surge in employees - including those at third-party providers - who now work from home, she says in an interview with Information Security Media Group. “You have to now step up your game in how you are protecting the network. … Are you putting controls on certain ways that information is coming in and going out of your network based on all of these work-at-home environments?”