Controlling access IS KEY 71% Access control is the biggest threat to a healthcare organization’s of CROs believe security. In addition to threats from third parties and supply chain integrated systems make 8 issues, organizations are beginning to see legacy systems and siloed for safer orgs teams as a threat that needs to be consolidated. 68% #1 45+ reported 4 or more aacks on their supply credential access is biggest average number of security chain in last 2 years4 fear for healthcare orgs1 tools used in enterprises11 Need to react QUICKLY 53% Urgency is the number one issue facing healthcare of healthcare orgs have documented plans to organizations’ responses to cyber threats. Bad actors are address vulnerabilities13 moving faster, and regulatory acts are asking for near real-time response and notification. 28% 62 minutes 72 hours of orgs are only set up to average time it takes an amount of time US monitor (not react) to cyber adversary to move from initial host government wants health vulnerabilities1 11 to another once in a system orgs to report cyber events12 State of Health Security 2025 | 6