Incident response plan
The healthcare industry has proven to be a high-value target for cybercriminals, with organizations in possession of sensitive data such as patients’ medical information, hospital bills, and other financial documents.
Healthcare organizations must adopt a comprehensive incidence response plan to defend against growing ransomware threats, advised Azeem Aleem, MD of the UK and Northern Europe at Sygnia, an incidence response and ransomware negotiation consultancy.
“This involves mapping out critical data, defining key roles for breach alerts, safeguarding essential business operations, and reviewing third-party partnerships for potential data access risks,” Aleem said. “Regular testing of incidence response protocols through simulations and wargames helps refine processes, bolster backup strategies, and identify areas needing improvement.”
Kelly Indah, a tech expert and security analyst at Increditools, said that “robust security due diligence during merger planning rather than later” could have helped Change Healthcare.
