EY and KLAS Research Survey Finds Cybersecurity Now Core to Healthcare Strategy

EY and KLAS Research have released a new US Healthcare Cyber Resilience Survey, announced in a press release, showing that 81% of healthcare organizations now integrate cybersecurity into their core business strategy. The survey collected insights from 100 healthcare executives responsible for cybersecurity decisions.

According to the findings, 72% of healthcare organizations experienced moderate to severe financial impacts from cyber incidents over the past two years. Operational disruptions were reported by 60% of respondents, and 59% said their institutions faced clinical consequences such as delayed treatments and reduced patient trust.

The report found that healthcare organizations encountered an average of five different types of cyber threats in the past year, with phishing, third-party breaches, and malware identified as the most common. Identity and access management was cited by 68% of respondents as the top investment priority for the coming fiscal year.

The survey also highlighted the need for workforce training and upskilling, with 52% of respondents identifying it as a key factor in improving cyber resilience. EY’s analysis outlined six strategic focus areas, including aligning cybersecurity with business goals, addressing AI-driven threats, strengthening vendor oversight, and evolving workforce capabilities.