Healthcare Under Siege: John Riggi’s Insights on Cybersecurity Defense

Healthcare Under Siege: John Riggi’s Insights on Cybersecurity Defense

Riggi’s main points

• Rising threats: Hospitals face more cyberattacks, and those attacks put patient safety and privacy at risk.
• Leadership Role: John Riggi says hospital leaders have to take part in protecting their networks.
• Shared Responsibility: Riggi backs a joint defense in which the public and private sectors share the load.
• Acting early: Riggi stresses preparing in advance and watching networks constantly.

Why hospitals are exposed

Healthcare now depends on digital systems for patient care, records and day-to-day operations, and that dependence creates real exposure. Ransomware and data breaches are the most common problems. The damage goes beyond money, because an attack can put patient safety and confidentiality at risk.

John Riggi, the American Hospital Association’s (AHA) National Advisor for Cybersecurity and Risk, has argued for years that hospitals draw attackers precisely because their work is so critical. He calls cybersecurity a patient safety issue. His FBI background helps.

Hospital leaders own cyber risk

Cyber defense in healthcare is no longer a job for the IT department alone. Riggi argues that executives need to be directly involved in security strategy and that cybersecurity belongs in the organization’s culture and governance as a business priority.

Riggi warns against leaving cyber risk to technical staff. Leaders need to understand what an incident could do to patient care and to the balance sheet, and they need to make sure security gets the money and support to match. That means firm protocols. It means regular training too.

Collective Efforts: A Coordinated Approach

Collaboration is central to Riggi’s message: hospitals, government agencies and private-sector partners need to work together. Attacks are getting more sophisticated, which calls for a united defense. Riggi points to the value of sharing threat intelligence and resources so that the whole sector is better protected.

He cites programs such as the 405(d) Health Industry Cybersecurity Practices from the U.S. Department of Health and Human Services, which give hospitals frameworks and best practices for managing cyber risk. Efforts like this aim to raise baseline security standards and coordinate the response to attacks.

Preparing before the attack

One of Riggi’s strongest recommendations is to prepare before an attack. Hospitals should not wait to react. They should plan for likely threats and reduce them ahead of time, with continuous network monitoring, regular vulnerability assessments and careful adoption of new technology.

He compares it to preventive medicine. Spend early.

Riggi’s message to hospital leaders

Riggi’s advice comes down to vigilance and early action. His focus on leadership, collaboration and advance planning is a direct challenge to the healthcare industry. Attackers keep getting more persistent and inventive, and a united defense matters more each year.

Hospitals and their partners need to respond with resolve and build defenses that go well past compliance. Riggi’s framing is simple: engage early and work together.

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.