Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Healthcare organizations that want to understand where they might have security gaps have several options.
Summary
A vulnerability scan will expose obvious holes in their defenses, while a penetration test run by a third-party facilitator can find more subtle weaknesses. But for an organization to be truly cyber resilient, it must know with confidence exactly how it will respond to an actual cyberattack. And while scans and pentests are vital, they won’t tell you that.
For that information, you’ll need to conduct a tabletop exercise.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
Relevant from KazaSec
More security news
We help organizations find and fix the gaps before they make headlines.