New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks

By Allison Proffitt
March 12, 2025 | At a session in the Cybersecurity Pavilion of ViVE last month, Cormac Miller, President and CCO of Censinet, presented the company’s 2025 cybersecurity benchmark for the healthcare sector. This year’s benchmark revealed that for the third year in a row, organizations are focusing on respond and recover capabilities. The findings compare company surveys to industry readiness frameworks, including NIST 2.0 and CPGs, highlighting the evolving landscape of healthcare cybersecurity.
Censinet co-sponsored the benchmarking study with KLAS Research, the American Hospital Association, Health-ISAC, Health Sector Coordinating Council, and the Scottsdale Institute. The benchmark was based on surveys sent to 73 healthcare organizations.
This was the fifth year of the benchmark, and the first year to use the Cybersecurity Framework (CSF) 2.0 from the National Institute for Standards and Technology, which was released in February 2024. The benchmark breaks down six core cybersecurity functions: Govern, Identify, Protect, Detect, Respond, and Recover.
Read the article in Bio IT World to view this year’s findings. Click Here
- Related Resources & News
- Are Efforts to Help Secure Rural Hospitals Doing Any Good?
- CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
- 2024 Health-ISAC Discussion Based Exercise Series After-Action Report
- Cobalt Strike takedown effort cuts cracked versions by 80%
- Denise Anderson recognized on Cyber25 Women of Impact list
- The ISAC Advantage for Collective Threat Intelligence
- How Hackers Using AI Tools Threaten the Health Sector
- Health-ISAC Hacking Healthcare 3-4-2025
- 2025 Newsletter – March
- Health-ISAC 2024 Annual Report