How close to we need to get to cybersecurity crisis in healthcare before we, as an industry take deliberative action?
Should we approach cybersecurity in healthcare differently? What approaches will work best? What commonly repeated advice about cybersecurity is actually wrong in healthcare settings? What ideas that would be effective in healthcare cybersecurity are being ignored? What is being missed from discussions about healthcare cybersecurity? What are we too concerned about? What threats do not get enough attention?
These might sound like rhetorical questions, designed to engage the reader before the author knowingly reveals the “answer”. Sadly, these questions are no rhetorical device. No one has definitive answers, and we all desperately need them.
I sit on the Health Care Industry Cybersecurity Task Force and we are currently taking comments on these issues on this blog post. I cannot to presume speak for the Task Force as a whole, and the comments below represent only my personal perspective on the issues involved. Right now the only thing that the Task Force as a whole is comfortable saying is “we are asking for advice”, which is the purpose of the blog post. If you have a reaction to the personal opinions here, please comment on the blog post so that the whole Task Force can hear what you have to say.
Generally, there are two types of issues that we would like advice on:
“What are the best practices and correct strategies to defend healthcare technology from cybersecurity attacks?” and “What is the best way for US government agencies to coordinate with the healthcare industry to respond quickly and effectively to cybersecurity threats?”






Transparency for consumers on prices and costs is a bipartisan goal in healthcare. The good news is progress is afoot. The bad news: that progress is still painfully slow. This blog presents a quick status update with discussion of and links to some recent reports and events.