The business of Security^™

Many healthcare security programs have developed reactively, lacking clear governance structures that align with modern risk realities. Establishing foundational governance—through defined organizational ownership, a formal charter, and aligned risk management practices—is essential to maturing these programs and protecting people, assets, and reputation.

The annual comprehensive security risk assessments required by various laws, regulations, and compliance bodies are essential components of a healthcare security program. However, leading and lagging indicators can arise anytime, signaling that a supplemental security review is appropriate or urgently needed. This article explores the key signals to watch for to keep your security program in alignment with your ever-evolving care environment.

Security and risk management are rapidly evolving fields, where sophisticated actors, from nation-states to cybercriminals, challenge the very foundation of organizational trust and resilience. We sat down with John Lenkart, CSA’s Chief Information Security Officer, who brings an extensive background of counterintelligence expertise in both government and industry.