Healthcare needs security architectures that provide control resiliency

Cyber resilience can be improved in healthcare through several approaches, including measuring control efficacy, eliminating bypasses, vulnerability management, and implementing defence in depth, system diversity and zero trust. It is crucial that healthcare organisations ensure robust security measures and architectures are in place to account for potential control failures. This involves moving beyond merely practising patching to incorporating improved control efficacy, diverse security control sets, and zero trust principles.