A Handy List Of Risk Questions Every Healthcare CISO Should Ask Potential Suppliers
SC Media, Thursday, May 22nd, 2025
Every healthcare company relies on external suppliers to activate services and process, transmit, or store their data - and every one of those relationships creates risk.
When any supplier suffers a ransomware or security incident, all the healthcare organization's constituents, including patients, customers and affiliated organizations bear the consequences: financial exposure, downtime, embarrassment, and even regulatory action.
For example, Ascension Health in May 2025 had to inform its patients that a breach of one of its suppliers compromised their medical data. The breached data included names, addresses, Social Security numbers, admission and discharge dates, diagnosis and billing codes and medical record numbers. No organization wants to send that kind of letter.