Incident Response Programs vs. Incident Response Retainers
When it comes to cybersecurity, every healthcare organization knows it needs an Incident Response (IR) capability, but far fewer realize that having an IR retainer alone isn’t enough. Many sign on for Incident Response Retainers (IRR), assuming that a bucket of pre-paid hours means peace of mind when a breach occurs. The reality? Both approaches […]
Inside a Healthcare Ransomware Battle: How Preparation Saved Patients
With 25 years in cybersecurity, including experience at the Department of Defense and National Security Agency, Phil Alexander has seen the full spectrum of cyber threats. Since founding his consultancy and working extensively with healthcare organizations, he’s gained unique insights into the industry’s specific vulnerabilities and the most effective strategies to address them. His experience […]
The Reality of Incident Response Readiness in Healthcare
Incident response should never be reactive. Incident Response readiness must be proactive and measurable, driven by a real commitment to continuous improvement. As management guru Peter Drucker famously said, “If you can measure it, you can improve it.” Yet at many healthcare organizations, Incident Response is static and disorganized: plans that have never been adequately […]
Preparation Changes Outcomes In Ransomware Attacks
In our latest webinar, we conducted a Red Team/Blue Team post-mortem on a real ransomware attack that occurred last year at Frederick Health Medical Group in Maryland. The system has more than 4,000 clinicians and staff across 25 locations. The Frederick Health attack exposed more than 900,000 patient records and hampered operations for a number […]
How to Build a Resilient Ransomware Defense Program in Healthcare
Ransomware attacks on health care institutions are attacks on people. System outages can block access to medication lists, x-rays or other imagery that doctors rely on to provide both routine and urgent care. In fact, an independent study published in February 2026 by the American Economic Journal: Economic Policy found that “Among patients already admitted […]