And how can we fix it . . .
Why is healthcare so bad at IT Risk Management?
Good question. And I certainly have my opinions about that. Last fall I moderated a panel on post-Omnibus security and I got to ask some current and active practitioners (a healthcare security consultant, a long-time healthcare attorney, and a sitting CISO from a multi-hospital system) that very question.