“To geek or not to geek?” that is not the only question. The real c-suite cyber-security question for executives might be, “Trust or not to trust?” All things IT still intimidates most people, no matter the generation. Being informed about security, network structures, and intrusive software challenges many experts in the field. Handing the responsibilities over to internal or contracted specialists without understanding the general concepts of cyber-security creates a blind spot. Not unlike, not grasping financial concepts because the accounting department handles that stuff.

The KPMG 2017 Cyber Healthcare & Life Sciences Survey of providers and health plans found a dramatic rise in computer system breaches, cyber-attacks, and data compromises, which include patient records, over the past two years. Despite that increase, more executives, who oversee protecting patient records and other information, say they are better prepared than two years ago to protect themselves against cyber-attacks.

The most important strategic security program decision that the organization can make is the framework that the organization adopts for its cyber-security and compliance program.