Ernst & Young LLP (EY US) and KLAS Research have released the US Healthcare Cyber Resilience Survey, which indicates that cybersecurity is becoming a critical component of business strategy for healthcare organizations. The survey, which included insights from 100 healthcare executives responsible for cybersecurity decisions, highlights the increasing sophistication of data breaches and their impact on healthcare systems.
According to the survey, 81% of healthcare organizations believe integrating cybersecurity into core business strategies can improve operational efficiencies and outcomes. Over the past two years, 72% of health organizations experienced moderate to severe financial impacts due to cyber incidents. These incidents also led to operational disruptions for 60% of respondents and clinical consequences such as delayed treatments for 59%.
The survey found that healthcare organizations faced an average of five different types of cyber threats in the past year, with phishing, third-party breaches, and malware being the most common. "Cybersecurity is more than a compliance checkbox — it drives safe care, patient trust and long-term success," said Nana Ahwoi, EY Americas Consumer and Health Cybersecurity Industry Leader.
The report outlines several strategies for enhancing cyber resilience: aligning cybersecurity with strategic goals; addressing AI-driven threats; supporting innovation through AI and automation; tackling talent shortages; shifting from regulatory compliance to strategic risk management; and strengthening vendor oversight.
Sixty-eight percent of respondents indicated that identity and access management would be a top investment priority in the coming fiscal year. Additionally, 52% highlighted training and upskilling personnel as effective measures against cyber challenges.
Ahwoi emphasized the importance of workforce cyber training to unlock cybersecurity investments' full value: "Healthcare leaders must prioritize workforce cyber training and readiness to unlock the full value of cybersecurity investments — ensuring safe patient care and strengthening system resilience."
For further details on the findings, visit US Healthcare Cyber Resilience Survey | EY - US.
Information from this article can be found here.