Choosing an approach to information security can be challenging due to the abundance of best practices, compliance requirements, and frameworks. It is important to comply with regulations and implement necessary controls, but also to take a risk-based approach and align security controls with business operations. Gathering data from industry sources and internal business data can provide valuable insights to support strategic planning and address emerging threats.
Concerns over the security of electronic personal health information intensifies
Ascension Health warned that the personal data of its patients and staff were compromised during a ransomware attack in May that impacted around 5.6 million
