Cyber Risk & Enterprise Risk Management Resources for Health Care

Cybersecurity and supply chain management are essential pillars for safeguarding patient safety and maintaining operational resilience in today’s health care environment. As cyber threats grow more sophisticated and supply chain disruptions become increasingly common, health care organizations must adopt proactive strategies to mitigate risk. Explore a wide range of actionable resources—including expert insights, interactive webinars, thought-provoking podcasts, comprehensive toolkits, and in-depth reports—to strengthen your organization’s risk posture. By leveraging these tools, you can enhance preparedness, ensure continuity of care, and build a more secure and resilient health care system.

Cybersecurity Resources

Report / Toolkit / Resource
Podcast
Webinar
Article / Blog

What is cyber risk in health care?
Cyber risk in health care refers to the potential threats and vulnerabilities that can compromise the confidentiality, integrity, and availability of digital systems and data within health care organizations.
Resources:
Why is it important to know about cyber risk in health care?
Cyber risks in health care can disrupt critical systems, compromise patient data, and delay treatment, directly threatening patient safety and quality of care.
Resources:
- The importance of cybersecurity in protecting patient safety
- Protecting Patient Safety at the Crossroads of AI, Cybersecurity and CRC
What can be done to prepare for a possible cyber-attack on my organization?
Proactive preparation for cyberattacks is essential to protect patient safety, maintain operational continuity, and safeguard your organization’s reputation and financial stability.
Resources:
Is cyber risk part of enterprise risk management (ERM)?
Cyber risk fits into ERM because it affects multiple domains, is interconnected across the organization and requires board-level oversight.
Resources:
How can I learn from others who have experienced a cyber-attack?
Health care organizations can strengthen preparedness by learning from peers’ cyber-attack experiences through case studies, webinars, and post-incident reports that reveal practical lessons and proven strategies.
Resources:
- How to Survive a Cyberattack with Scripps Health
  Part One | Part Two | Part Three | Part Four
Is there an assessment tool I can use to assess my organization's risk for a cyber-attack?
Using an assessment tool can help health care organizations evaluate their cyber risk and strengthen preparedness.
Resources:
- What is Your Cyber Risk Profile: 12 Considerations for CEOs
- AHA Clinical Continuity Assessment Program

Supply Chain Resources

How can health care organizations manage supply chain vulnerabilities?
Organizations can use SWOT analysis and resilience strategies to mitigate supply chain shocks.
Resources:
- Supply Chain Resilience: Where Does It Sit on Your SWOT Analysis?
- Supply Chain Root Cause Analysis - Infographic
- Navigating Supply Chain Shocks: Challenges, Opportunities & Emerging Practices
- Supply Chain Heat Map
- Supply Chain Resource Reports
- Monitoring and Mitigating Third-Party Cyber Risks: Proactive Strategies for Managing Vendor Cybersecurity Gaps
What are actionable steps to secure the digital supply chain?
Digital supply chain security requires vendor risk management and monitoring third-party vulnerabilities.
Resources:
- Strengthening Cybersecurity in Health Care- A Data-Driven Approach to Digital Supply Chain Security
Where can I learn from others about supply chain risks?
Learning from others is a way to strengthen the prevention of supply chain issues.
Resources:
- Continuing the Discussion: Reimagining Supply Chains
- Power Partnerships: How Clinical & Supply Chain Leaders Are Transforming Health Care Together
- ssss