The Board's Role In Cybersecurity

Co authored by Poonam Puri

Increasingly, cybersecurity is at the top of the agenda for most hospital boards, audit/risk committees and senior management teams. Board directors are wondering whether they are asking the right questions and making the right decisions when it comes to the organization's overall cybersecurity strategy. Given the increased sophistication, frequency and magnitude of cyber threats, it is essential that directors have a good understanding of the cyber threats facing their organization and take appropriate steps to mitigate potential risks.

The successful Hollywood Presbyterian cyberattack resulted in emboldened hackers targeting other hospitals. In Canada, two Ontario hospitals were reported to having been victims of ransomware attacks. In March 2016, the Ottawa Hospital was subject to a hacker attempt on its computers, where the malware also locked down the files after someone using the computers clicked an infected link. The hospital's IT