Health Systems Need New Approach to Managing Threat Posed by Third-Party Vendors

If cybersecurity challenges are mounting for health systems in today’s increasingly risky global environment, why would it be any different for their third-party vendors - especially the smaller ones? What’s clear is that even the largest of health systems can only be as safe as their partners. In this episode of healthsystemCIO’s Partner Perspective Series, Anthony Guerra, editor-in-chief and founder, talks with Brian Selfridge, a partner at Meditology Services, about the issue. 

Selfridge says it’s just a matter of time before health systems get breached if they don’t vet and continue to monitor third-party risk. To do so, they will likely have to make an investment in staff, technology or process - or a little of all three, he says. A single breach of a key vendor can impact hundreds of health systems in one swoop, Selfridge says. “We’re seeing a lot more attention on third-party risk, from the board level to the management level, and even in the workforce.”