Please see the below the weekly threat brief from the HHS Health Sector Cybersecurity Coordination Center (HC3). This week’s briefing is on Quantitative Risk Management in Healthcare Cybersecurity and covers the following topics:
Risk Management
Risk Frameworks
Qualitative Vs. Quantitative Risk Management
Quantitative Approach Over Qualitative Measures
Traditional Risk Management and the Way Forward
Cyber Risk
Data Needed for Quantitative Risk Management
Examples of Quantitative Approaches
Key Risk Indicators (KRIs)
Some Metrics Used in Quantitative Risk Management
Small Healthcare Organization Usage
Case Study: Mayo Clinic Supply Chain Risk Management
Data Breaches from 2019 Verizon Data Breach Investigation Report