According to a recent FortiGuard Labs report, healthcare is experiencing attacks at twice the rate of other business sectors. Healthcares overall size and thus attack surface is second only to the US government. Healthcare’s overall IT spending reached 100 billion in 2017. The HITRUST CSF manages risk by looking at regulatory, organizational and systems factors. There are up to three levels of requirements defined based on the relevant organizational or system scope. The minimum-security controls are defined for an information system system.”]
Source: https://www.csoonline.com/article/3269001/is-your-organization-a-hitrust-org.html