Cybersecurity Policies
While the HIPC has not been updated since 2018, a review of recent data breaches in healthcare suggests that the identified threats are still relevant. For example, a 2019 study by the Journal of American Medicine of 95 simulated phishing campaigns at six US health care institutions noted almost one in seven test emails sent were clicked by employees [4]. And recently, a ransomware attack affected 250 Universal Health Systems facilities taking their systems offline for almost a week [5]. These reports agree with the 2020 HIMSS Cybersecurity Survey, which noted the top security events included phishing events, harvesting and ransomware [6].
Other Programs and Processes