I spent the week in Chicago speaking to healthcare executives about the threats of ransomware and data theft. While they agreed its the number 1 or 2 priority for their industry, it also seemed to be the least funded of their items. I broke down the logic : 1. Average tenure of CIO / CISO is now roughly 24 months. 2. If you get ransomware/data loss, your cyber insurance foots the bill. 3. If you pay for preventative measures to avoid this, you may get into hot water for not controlling IT costs. 4. So you save the money, hope you don't get hit, and move on after 2 years and it becomes the next guys problem. Are we beginning to see why the bad guys are winning?? If we don't address these problems now, the federal government will step in and regulate you into oblivion. #therearebettersolutions
These problems will not be addressed without market pressure, and this is a cost-saving status quo, so there is no pressure to change…
Ransom roulette
Spot on Andrew!
Beautifully started!
Healthcare CISO | Educator | Veteran | Entrepreneur | Risk PHD
8moInsurance companies don’t validate policy application responses. Carriers still don’t deny enough claims based on bogus or fraudulent submissions. Waiting for the hammer to drop. Insurance companies have to be tired of losing money to the bullshit that companies are saying they do. If an IT leader filled out the form, it should be rejected probably 98% of the time and I am saying that in response to a very good IT leader.