Choosing an Information Risk Management Framework:
The Case for the NIST Cybersecurity Framework (CSF) in Healthcare Organizations
Authored By: Bob Chaput, Founder & Executive Chairman, Clearwater
The question becomes: Am I going to spend my cybersecurity budget on somebody else’s list of ‘good things to do?’ Or am I going to spend it on the basis of my organization’s assets, my exposures, my business goals and objectives?” - Bob Chaput
The white paper describes the role a cybersecurity framework plays in a healthcare organization’s overall risk management program, and why the framework is an appropriate and effective framework for the healthcare industry.
A complete information risk management strategy combines all three of these components to achieve a holistic and effective information risk management program across the healthcare enterprise.
FRAMEWORK | PROCESS | MATURITY MODEL
