HealthIT Answers December 9, 2025
Many behavioral health agencies lack adequate controls to address and recover from a cybersecurity incident. What these agencies need are capabilities such as adequate backup and recovery, managed detection and response (MDR), security information and event management (SIEM), data loss prevention and other key security elements. Without these tools, agency leaders cannot identify a security incident and remedy or recover their IT environment.
In a 2024 report, the Ponemon Institute, an IT security research firm, found 92 percent of healthcare organizations surveyed had at least one cyberattack in the past 12 months. According to Linda Stevenson, chief information officer for Fisher-Titus Medical Center in Ohio, when health care budgets tighten, funding for cybersecurity often goes by the wayside. While there...







