The majority of providers, 85 percent, have discussed cybersecurity at the board level within the past year, but levels of preparedness vary, according to the 2015 KPMG Healthcare Cybersecurity Survey.
Here are four findings from the survey.
1. Nineteen percent of providers do not have a leader solely responsible for information security.
2. A quarter of providers do not have an information security operations center.
3. The majority of providers (86 percent) have invested in information security within the past 12 months.
4. Survey respondents reported the information security resources they feel are adequate at their organizations.
• IT compliance/risk management: 70 percent
• Managing firewalls and other critical network resources: 60 percent
• Handling security incidents: 55 percent
• Monitoring data leakage: 53 percent
• Monitoring technical infrastructure resources for health and welfare: 49 percent
• Managing vendor security risks: 35 percent