Governance, Risk and Compliance

The documents include a list of best practices for securing accounts, devices and data, vulnerability management, governance and the supply chain, as well as a “user friendly” worksheet for owners and operators in critical infrastructure to map their cybersecurity practices to standards developed by the National Institute for Standards and Technology and plan new investments.

Stronger restrictions are being proposed by the Federal Trade Commission against alcoholic beverage delivery platform Drizly following a data breach in 2020 that compromised sensitive information from 2.5 million individuals, which federal regulators earlier attributed to the service's persistent security lapses, according to CNN.

By analyzing visibility, exposures, and threats organizations can bolster their security posture.

Federal agencies issued an urgent alert on the Daixin ransomware group after it successfully targeted multiple healthcare provider entities in the last five months.

An audit of EyeMed found the insurer failed to conduct a risk assessment in compliance with New York’s cybersecurity regulation after its 2020 email hack impacting millions of patients.

A recent KLAS-Bain & Company Survey shines a light into current investment plans for healthcare organizations. Even with a recession looming, cybersecurity remains in focus.

In its third week of EHR downtime, CommonSpirit Health confirms only some of its care sites were impacted. As the public calls for more communication, healthcare stakeholders ask for patience amid the investigation into the ransomware attack.

A new Forescout’s Vedere Labs report details the state of medical device security, noting that while the data shows healthcare’s risk-level is lower than other sectors, it’s a reflection of visibility, not risk profiles.