One of the benefits of being in a highly regulated environment is that there is familiarity with how and when legislation tends to change and when and where subsequent regulatory changes occur. It is precisely in this environment that the outpacing of compliance can happen. When outpacing compliance, getting ahead on risk management becomes more straightforward. That is how to gain a forward facing cyber security posture.
During our recent Cyber Security Digital Summit for Healthcare & Life Sciences, Denver Health CISO, Randall “Fritz” Frietzsche, Enterprise Chief Information Security Officer took us through the thesis: If compliance is a check box- and even if all the boxes are checked- doesn't equate to security. Realizing risk management is very difficult for many organizations to actually achieve- whether it be due to a lack of clarity on the definition or where to focus resources. Forward posture is thinking more strategically with more vision. If the team and tools are spread too thin, even though a forward posture might be assumed- it does not mean that results will follow.
With decades of experience, Fritz dives in on a few key points in this on demand session:
- Honestly assessing the current state of your cyber security organization, talent, tools and technology.
- Thinking beyond privacy and management of PII to ensure readiness for a next layer of regulations.
- Conceiving of the next phase associated with current risks to your enterprise to ensure continued management, mitigation and remediation of inevitable incidents.
- Engaging in threat modelling based on custom threat intelligence.
Fritz was then joined by CyberMDX’s Rich DeFabritus as they fielded audience Q&A including these questions:
[inlinead-1]
- What is the biggest lesson learned in Healthcare from this past 12 months that cyber security executives from other industries should pay heed?
- What should cyber security executives to protect against the uncertain future of cyber security insurance that you mentioned?
Hear the responses and the entire session here.