GRC Academy13 Dec 2024

Healthcare Cybersecurity: Lives are at Stake

Should you NEVER pay after a ransomware attack?

In this episode I speak with Frank Riccardi about cybersecurity in healthcare and the event that triggered much more cyber accountability for the C-suite.

Here are some of the highlights:

Why healthcare workers are prone to social engineering attacks
Reasons you SHOULD and should NOT pay after ransomware attacks
Managing shadow IT after acquisitions/mergers
Why every member of the C-suite must understand cyber
The importance of a culture of reporting

Frank is a former C-level executive with 25 years of experience developing compliance and privacy programs for large healthcare systems comprised of hospitals, physician practice groups, urgent care centers, and other healthcare organizations.

I really enjoyed Frank's description of shadow IT! I always thought of an employee who is using an unauthorized application, but I never thought of it from the standpoint of an acquisition/merger.

What stood out most to you? Whatever your thoughts are, feel free to let me know in the comments!

Follow Frank on LinkedIn: https://www.linkedin.com/in/frank-riccardi-261831b1/

Frank's Book (Mobilizing the C-Suite: Waging War Against Cyberattacks): https://www.amazon.com/Mobilizing-C-Suite-Waging-Against-Cyberattacks/dp/1637424248/

-----------

Thanks to our sponsor Vanta!

Want to save time filling out security questionnaires?

Experience questionnaire automation here: https://vanta.com/grcacademy

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e41&utm_campaign=courses

#cybersecurity #healthcare #hospital #informationtechnology

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(55)

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Nov 202536min

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Sep 20253min

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Juni 202552min

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Juni 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Maj 202555min

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Maj 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Apr 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Apr 202558min