2018 State HIT Connect Summit

The number of reported data breaches and ransomware attacks has continued to increase, and systems containing healthcare related information have become a major target. As systems become more modular, the number of interconnections and components that could be targeted and provide an avenue to the sensitive data will increase. The presentation will discuss the various definitions of Cyber Security and propose approaches to assess the cyber security posture of an organization or system to identify vulnerabilities or weaknesses based on real world experience assisting state clients in these assessments and based on new approaches. The presentation will include discussion of current cyber security guidance and frameworks such as the National Institute of Standards and Technology Cybersecurity Framework and the American Institute of Certified Public Accountants SOC 2 for Cybersecurity Risk Management.