Balancing risk management with scalable costs is ‘table stakes’ for security strategy

Healthcare delivery organizations need to ensure that their vendor partners are compliant with privacy and security best practices in the current cyber environment, according to a Cloud Security Alliance report. Scott Pradels, CEO of Carium, emphasized the importance of evaluating workflow process security and discussed why system-owned devices may pose complications. Health systems should adopt a multifaceted approach to security, conduct regular risk analyses, and use strong protections such as encryption and threat detection. The growth in connected devices increases the risk of cyber threats, such as phishing and ransomware, targeting healthcare organizations. When selecting technology partners, healthcare systems should prioritize a measured yet assertive security posture and choose companies that understand HIPAA obligations.