Can’t afford a security chief? Here are the alternatives

For smaller hospitals and medical groups, hiring a full-time chief information security officer (CISO) can be costly. As a result, cybersecurity responsibility often falls to the CIO, IT director, or even the hospital’s EHR vendor. This has given rise to two alternatives: hiring a virtual CISO or outsourcing cybersecurity to a managed provider. It is important for hospitals to conduct a risk analysis before making a decision, and more hospitals are considering the cloud as a secure option for data protection.