New Healthcare Security Benchmark Highlights Key Investment Priorities and Risks

By Allison Proffitt
March 12, 2025 | At a session in the Cybersecurity Pavilion of ViVE last month, Cormac Miller, President and CCO of Censinet, presented the company’s 2025 cybersecurity benchmark for the healthcare sector. This year’s benchmark revealed that for the third year in a row, organizations are focusing on respond and recover capabilities. The findings compare company surveys to industry readiness frameworks, including NIST 2.0 and CPGs, highlighting the evolving landscape of healthcare cybersecurity.
Censinet co-sponsored the benchmarking study with KLAS Research, the American Hospital Association, Health-ISAC, Health Sector Coordinating Council, and the Scottsdale Institute. The benchmark was based on surveys sent to 73 healthcare organizations.
This was the fifth year of the benchmark, and the first year to use the Cybersecurity Framework (CSF) 2.0 from the National Institute for Standards and Technology, which was released in February 2024. The benchmark breaks down six core cybersecurity functions: Govern, Identify, Protect, Detect, Respond, and Recover.
Read the article in Bio IT World to view this year’s findings. Click Here
- Related Resources & News
- Health-ISAC Hacking Healthcare 4-14-2026
- Mythos and Like AI Tools Raise Stakes for Healthcare Cyber
- Massachusetts hospital turning ambulances away after cyberattack
- Podcast: Phil Englert on Medical Device Cybersecurity
- The insider threat rises again
- ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void
- Health-ISAC Hacking Healthcare 3-26-2026
- Health-ISAC Hacking Healthcare 3-19-2026
- Health-ISAC Monthly Newsletter – April, 2026
- After-Action Report: Health-ISAC Resilience Exercise Series 2025