Dave Summitt is CISO of Florida’s Moffitt Cancer Center and Research Institute. He has more than 25 years of experience in IT across the federal and private sectors. Healthcare organizations should take a risk-based approach to working with business associates, he says. In a video interview at Information Security Media Group’s Healthcare Security Summit in New York, Summitt discusses the regulatory enforcement environment and the need for vendor risk management. He also discusses his own approach to managing reluctant vendors in the healthcare sector.”]
Source: https://www.govinfosecurity.com/taking-new-risks-vendor-risk-management-a-10475