How hospitals can financially measure the risk of cybersecurity attacks

Assuring that everyone uses the same methodology for calculating cyber risk is the value proposition. "How much is it going to cost me?" is the first question that comes to mind when the subject of risk quantification in healthcare is brought up, according to Jack Lewin, who was speaking at the HIMSS Healthcare Security Forum in Boston. The founder and principal of the consulting firm Lewin & Associates, Lewin, posed the question, "How do we value the healthcare data we're trying to protect here?" There is no conclusive solution, according to chief information security officers and other professionals who participated in "Cyber Risk Quantification in Healthcare." Only hospitals and other healthcare companies are able to invest millions of dollars with no return on investment (ROI) and benefits that are not immediately apparent to anybody outside of the security team, according to the expert.