I realize it's been quite a while since I taught - or was in school myself - but I'm distressed…
Morning Headlines 5/19/16
In a letter to the Senate Subcommittee on Crime and Terrorism, CHIME addresses the threat cyberattacks pose to healthcare organizations, saying “. Even the largest healthcare delivery organizations, with the greatest investment in security programs, may still fall victim to bad actors as we have seen with some of the largest retail organizations, financial institutions and even the federal government suffering large-scale breaches.”
Rating hospitals by the stars: The feds’ latest plan to measure quality is the most controversial
The Washington Post outlines the industry concerns that led to CMS delaying the implementation of its new star rating system for hospitals.
Obamacare Rates Rise in New York, and So Does Political Risk
Insurers in New York are requesting premium increases averaging 17 percent in New York. Alan Murray, CEO of New York insurer CareConnect, says, “If these requests aren’t approved, you are going to see more carriers leaving the market.”
ER docs sue HHS over out-of-network payments
The American College of Emergency Physicians is suing HHS over a provision of ACA that allows insurers to underpay for out-of-network emergency medical services.
“Even the largest healthcare delivery organizations, with the greatest investment in security programs, may still fall victim to bad actors”
So CHIME’s implying or claiming that healthcare delivery organizations have actually made great investments in security programs already and may still be vulnerable? Or is this a way to get the federal government to indemnify healthcare delivery organizations from cyber-attacks regardless of the effort they’ve made (or not made) to secure their systems and data? Have leaders of any other industry approached the feds with a begging bowl like this for cyberattacks?
re: SimpsonsLive
“…may still be vulnerable?”
There is no maybe about it. You will never be able to protect against all attacks without severely limiting how users work. The best you can hope for is to make it a lot more difficult and more importantly a lot more expensive for the hackers/malware to impact the organization.
The more work/time, the more resources, the more money the attacker needs to expend, the less likely they will be to attack.