Empowering Healthcare Cybersecurity: Key Takeaways from HIMSS25 for a Safer Future – Health Data Management

Cybersecurity in healthcare is becoming more vital as new threats emerge constantly. At HIMSS25, leaders in the healthcare sector are focusing on how to enhance cyber resilience, develop the workforce, and create better policies to protect patient data.

Mar 04, 2025 | 3 min read

In Las Vegas, the HIMSS25 Healthcare Cybersecurity Forum kicked off with a strong keynote by Chris Tyberg, the Chair of the Cyber Working Group. He stressed the urgent need for everyone in the industry to work together to strengthen cybersecurity.

Keeping Up With Technology Changes

Tyberg pointed out that technology is changing fast, sometimes in just hours, which raises new security threats. The healthcare sector needs to keep pace to ensure patient safety and protect their sensitive information.

Five-Year Cybersecurity Plan

One year into its five-year strategy, the Health Industry Cybersecurity Strategic Plan has provided 28 free resources to help healthcare organizations enhance their cybersecurity. However, Tyberg urged for more involvement from all sectors to make full use of these tools. He warned that without collective effort, the industry could fall behind in cybersecurity by 2030.

Four Pillars of Cybersecurity

He outlined four key pillars that are essential for improving cybersecurity in healthcare:

• Access to Resources: It’s crucial that every healthcare organization, large or small, can obtain the resources needed to stay secure. Tyberg noted that many small and medium providers were absent from the forum, highlighting the need to bring them into the conversation.
• Workforce Development: There’s a shortage of cybersecurity professionals. The newly launched HSCC Academic Partnership aims to support educational programs, especially community colleges, to help fill this gap.
• Community Support: HSCC encourages mutual support agreements among organizations, similar to models used in other critical industries. This could enhance training and response during cyber incidents.
• Policy and Governance: It’s important to have clear policies that adapt to new security threats and regulatory needs.

Involving Smaller Providers

One main worry is that smaller healthcare providers are not participating enough in cybersecurity discussions. The CWG plans to organize more community meetings in different cities to help spread knowledge and resources to all healthcare entities.

The Need for Collective Action

Tyberg’s message called for unity in the healthcare sector to improve cybersecurity defenses. He reminded everyone that without proactive steps and broad implementation of resources, the industry faces ongoing risks as cyber threats evolve.

Kenneth R. Deans, Jr. is the President and CEO of Health Sciences South Carolina.