Health systems heavily rely on third-party vendors for various services, making them vulnerable to cyberattacks. The recent attack on Change Healthcare highlights the disastrous effects of third-party cyberattacks on healthcare providers. Transparency is crucial in responding to cyber incidents, but legal concerns often hinder information sharing. Organizations need time to understand the extent of the attack before sharing information with relevant groups. Lessons can be learned from organizations like University of Vermont Health Network, which provided transparency and guidance after a ransomware attack. Collaboration and sharing of indicators of compromise are essential in mitigating cybersecurity risks in the healthcare industry.
Source link
Intermountain Health CISO: The Industry Needs Better Transparency After Cyberattacks
