As the supply chain in the healthcare sector becomes increasingly complex, so do the cybersecurity risks and threats. New guidance aims to help healthcare organizations better address these challenges, says Darren Vianueva, who co-chaired an industry task force that developed the guidelines. The Health Industry Cybersecurity Supply Chain Risk Management Guide describes how organizations can “use and leverage their supply chain as a gatekeeper to identify and mitigate third-party risk and provides tools, templates and resources to build their security program.”
In a 10-minute interview, Vianueva also discusses:
- How the guidance can be applied by larger healthcare organizations
- How the guidance maps to the supply chain security practices in NIST’s Cybersecurity Framework
- The types of supply chain cybersecurity challenges the guidance addresses