2025 Newsletter – March

Stay up-to-date with health sector content and upcoming events.
March newsletter features include:
- 2024 Annual Report, ‘Building Sector Resilience’
- 2024 Health Sector Cyber Threat Landscape Report
- 2025 APAC – special events highlighted
- 2025 Spring Americas Summit – Keynote Speaker Announced
- Full Version Third Party Questionnaire © 2025 Health-ISAC is now available!
- Member Discount to the RSA25 Conference
- March and April Health Security Workshops – Basel, Switzerland; Orlando, Florida; and Mentor, Ohio
- March webinars
Text version:
Recently Published Reports
Health-ISAC’s Annual Report – Building Sector Resilience
Learn about the initiatives, achievements, and impact that Health-ISAC delivered in 2024.
This year’s report includes an infographic timeline of significant cyber and physical events that affected the global sector in 2024.
Download the report here.
Health Sector Cyber Threat Landscape – A challenging year for health sector cybersecurity
Use the information in this report to help prioritize efforts to protect health sector organizations and cybersecurity programs in 2025.
Download the public report here.
Members can access the full report in the Threat Intelligence Portal (HTIP).
‘Rise Against Threats’ APAC Summit – Only 2 weeks away!
Registration closes March 12, 2025 | 11:59 PM MYT
Plan to arrive Tuesday to attend one of the Member Round Table discussions: Shared Responsibility Model in Practice, A China for China Strategy, Insider Threats, or Who Do You Trust?
Tuesday Welcome Reception
Kick off the week by meeting new peers while enjoying food and refreshments at the Tuesday evening meet-and-greet.
Wednesday Evening Event
Rise Above the heart of Kuala Lumpur for an evening of networking, food, and fun at the world’s tallest twin skyscrapers, Petronas Towers.
Thursday Evening Dinner
Close out the conference with a beautiful dinner at the resort. Solidify relationships and get a sneak peek at next year’s APAC Summit.
Spring Americas Summit
Register today with the Early Bird rate of US $200 until April 18
Keynote speaker Sunny Wescott is a Chief Meteorologist for the Federal Emergency Response within the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA). Her presentation will show the interlinked interdependencies of critical infrastructure as extreme weather continues to cause greater amounts of damage around the world.
Third-Party Risk
Full Version Third Part Questionnaire© 2025 Health-ISAC is now available!
The Health-ISAC Third Party Working Group has updated the full Health-ISAC assessment, a questionnaire designed to evaluate third-party vendors in the health sector. This update builds on last year’s improvements to the lite version, ensuring both assessments remain valuable amidst evolving technology risks. Members can download both versions from the Member Portal Library under Resources.
2025 updates include:
- Streamlined questions to reflect the increasing cloud landscape (fewer companies own their own server farms and buildings)
- Aligned questions and answers to better communicate the ask (removed double negatives)
- Eliminated redundant questions.
- Added AI usage questions.
RSAC25 Conference
Join, learn, & save. Health-ISAC members enjoy $150 off RSAC Conference 2025
Join us for RSAC 2025 in San Francisco from April 28 – May 1! Immerse yourself in critical cybersecurity discussions, network with industry leaders, and uncover innovative ideas. Experience hands-on learning and deep-dive sessions. Register by March 28 and save up to $750. Plus, Health-ISAC Members save an additional $150 using a discount code. Email contact@h-isac.org.
The RSAC 2025 agenda is LIVE! Explore it here:
Upcoming Workshops
All Regional Workshops include a networking lunch
March 6 in Basel, Switzerland, hosted at Roche. Thank you to Booz Allen for sponsoring.
Register
March 26 in Orlando, Florida, hosted at Health-ISAC’s Threat Operation Center, includes a tabletop exercise. Thank you to Google for sponsoring.
April 17 in Mentor, Ohio, hosted at STERIS, includes a tabletop exercise.
- Related Resources & News
- Health-ISAC 2024 Annual Report
- Healthcare Cyberattacks Continue to Escalate in 2025
- Trump’s CISA Cutbacks Worry Cybersecurity Pros
- Top 5 cybersecurity concerns for healthcare in 2025
- Change Healthcare’s Mega Attack: 1 Year Later
- Health Systems Must Develop Plans to Assume Cyber Responsibility for Medical Devices When Manufacturer Support Wanes
- Health-ISAC Finds Ransomware & Third-Party Breaches Dominate 2025 Threats
- ISAC chief on CISA security rollbacks: ‘The sky isn’t falling, yet’
- Building a Collective Defense: Collaborative Threat Intelligence and Information Sharing for Critical Infrastructure
- Healthcare Heartbeat 2024 Q4