Skip to content
‹ Back to IndustriesBusiness Services

Personal Responsibility in Cybersecurity is the Cornerstone of a Holistic Strategy for Protecting Healthcare from Cyber Threats

Healthcare organizations strengthening their defenses discover that individual accountability across all staff levels becomes the most effective barrier against

This story was produced through MarketScale. See how Business Services teams put it to work with Executive Thought Leadership.

By Davy Wittock · · CybersecurityCybersecurity in HealthcareCybersecurity StrategiesDavy Wittcock
Share

Key takeaways

01

Healthcare organizations strengthening their defenses discover that individual accountability across all staff levels becomes the most effective barrier against

Free workspace

Turn your Business Services expertise into content.

Record interviews, organize footage, and write with AI on a free trial of the MarketScale platform for qualifying companies. No demo required, no credit card.

Try it Free

Emphasizing personal responsibility in cybersecurity is essential for forging a resilient defense against the rising tide of cyber threats targeting the healthcare sector.

Emphasizing personal responsibility in cybersecurity is essential for forging a resilient defense against the rising tide of cyber threats targeting the healthcare sector.

The cybersecurity community is abuzz in the wake of a devastating ransomware attack on Change Healthcare. U.S. senators, led by Senator Elizabeth Warren, call for greater transparency from the Cybersecurity and Infrastructure Security Agency (CISA). This demand spotlights the escalating urgency for robust cyber defenses as the healthcare sector becomes increasingly targeted. The senators' call for a comprehensive assessment underscores the pressing need for a systemic overhaul of how ransom payments, particularly those involving cryptocurrencies, are handled in breach responses.

What practical steps can enhance cybersecurity measures without relying solely on regulatory frameworks? This question is at the heart of this expert analysis, especially relevant as industries and governments grapple with the growing sophistication of cyber threats.

Davy Wittcock, a Healthcare CBO, IT Executive & Analyst, and Chief Business Officer at InFlux, advocates that personal responsibility in cybersecurity begins with individuals being vigilant about their digital interactions, a fundamental layer of any comprehensive cyber defense strategy. The solution involves governmental intervention and a ground-up approach starting with individual actions.

Key insights from Wittcock include:

  • Holistic Approach: Cybersecurity requires a collaborative effort from individual vigilance to governmental oversight
  • Guidance Over Regulation: The focus should be on providing clear guidelines and tools rather than imposing stringent laws which may not be as effective
  • Versatility of Threats: Banning specific payment methods like cryptocurrencies won't stop ransomware attacks, as perpetrators will find alternative means
  • Empowering Entities: Entities at all levels need tools and knowledge to prevent and respond to cyber threats effectively
  • Starts with Individuals: Encourages personal responsibility in cybersecurity practices, such as avoiding suspicious links and maintaining business-only communications

Wittcock's analysis reflects the broader implications for cybersecurity strategies in safeguarding sensitive sectors like healthcare. His emphasis on a bottom-up approach highlights the need for comprehensive and adaptable strategies that involve all stakeholders.

Video TranscriptExpand ↓

I'm sure a lot of companies are doing everything they can at this point to make sure that they're safe, their employees are safe, their data is safe. So, ultimately their customer data is safe. But I do think Saisa has an ultimate role to play in this, in providing clear guidance. It doesn't have to be straightaway laws. I don't think laws are gonna help with this, but I do think clear set of tools, clear set of guidelines, a runbook almost. If we do get attacked, who do we contact? Where do we start? Provide that guidance. I think that's where the government has to help. Not by creating more regulations. Not by going after the cryptocurrency that is utilized in a ransomware attack. Ultimately, even if you would somehow be able to ban a crypto currency from being utilized, these individuals aren't smart enough to find different ways of getting a sort of a payment. And ultimately, that can be anything. Almost cryptocurrencies are utilized because it's digital. It makes it easy, but that doesn't stop them from using anything else. Again, in summary, I do think cybersecurity starts again from bottom up situation. It starts with any individual doing the right thing using common sense. Don't click on very interesting links. Keep it to the business. From there, it goes up to the management and the IT departments where they will take the necessary steps as well by making sure there's antivirus protection is intrusion detection systems. There's a lot of software out there these days already that helps with mitigating these type of attacks. And then ultimately the government itself by providing guidelines, but providing the tools, the wisdom, the expertise to help with the attacks like this and to prevent them ultimately. Finger pointing is not gonna help here. This is such a multifacet event, a stressful event, unfortunate event, and ultimately it's the healthcare system here that was attacked. And that's the the unfortunate piece here is that patient health is at risk. Financial pieces to it as well, especially in the US with the the way health care set up there. So we all have our role to play, and that's where it starts starts with you. If we don't realize that that it starts individually, and I hope this does not trigger a response from a government where they will dictate downwards what needs to happen because ultimately, I think we do think that will open us actually up for more attacks if we think it is a up down response that's required here. I do think it's from the bottom up. I do think we all play our role. And if we all do that, we basically make it a lot harder for anybody to successfully attack. Attack.

Your experts belong here

Every story in MarketScale Business Services starts with a company putting its consultants, practice leads, and account teams on the record. Buyers are already reading this topic. The only question is whose experts they find.

Clients hire the firm whose thinking they have already read, which means fewer cold conversations for your partners.

Book DemoSee how it works15 minutes, straight to a calendar.

About the author

DW
Davy Wittock
B2B Weekly

The week in Business Services, and sixteen other industries, every Monday.

Ten stories, one-line takes, five minutes. Free.

Business Services: are you visible to AI?

Before they reach out, Business Services buyers ask AI engines which vendors to trust. Explore how your experts, customers, and partners can become useful content for buyers and AI search.

Free Trial

You just read one Business Services expert. Your company is full of them.

This article was produced through MarketScale. The same platform turns your consultants, practice leads, and account teams into the articles, video, and social content Business Services buyers are searching for. Start a free trial and see it with your own people. For qualifying companies, no credit card, no demo required.

NPS +73 · 1,000+ creators · 38+ countries

What your free trial includes

Hands-on access to the MarketScale platform
Media requests to your crowd, remote recording, AI writing tools
No demo required. No credit card.
For qualifying companies. Company confirmation required.

More Business Services Insights

The Early Scale: Schneider Electric agrees to buy PTC; AI forecast needs context

The Early Scale: Schneider Electric agrees to buy PTC; AI forecast needs context

Schneider Electric has agreed to buy PTC in a deal with a $22.6 billion equity value, with closing expected in the third quarter of 2027 subject to approvals. For industrial buyers, the immediate question is how product roadmaps and integration plans may change. Separately, Gartner’s June 2025 forecast concerns cancellations of agentic AI projects by the end of 2027—not a measured failure rate for AI generally.

  • 01Schneider Electric’s proposed PTC acquisition has a $22.6 billion equity value; closing is expected in Q3 2027, subject to approvals.
  • 02Gartner forecast more than 40% of agentic AI projects would be canceled by end of 2027; this is not an observed failure rate.
  • 03A3 lists R15.08 Part 3 for mobile robot safety; operators should assess relevance.

Oct 13, 2026

The Early Scale: A3's Mobile Robot Safety Standard Demands Site-Level Compliance

The Early Scale: A3's Mobile Robot Safety Standard Demands Site-Level Compliance

As businesses grapple with the fast-evolving landscape of technology, maintaining industry standards and optimizing operations is more crucial than ever. New safety standards in the robotics field drive compliance needs, while strategic acquisitions in the software industry offer a glimpse into future growth avenues. Meanwhile, operational optimizations in retail highlight the importance of cost management and customer satisfaction. These shifts aren't just trends; they're pivotal moves that can redefine competitive advantages across sectors.

  • 01A3's R15.08 safety standard mandates user sites maintain continuous compliance and safety assessments for mobile robots throughout their operational lifecycle
  • 02Schneider Electric’s $22.6B PTC deal aims to expand its integrated digital transformation offerings
  • 03ShipStation's new Walmart Marketplace feature offers sellers access to Walmart shipping rates and up to $100 loss protection to reduce logistics costs

Oct 12, 2026

The Early Scale: Intune's New Security Baseline Requires Manual Updates

The Early Scale: Intune's New Security Baseline Requires Manual Updates

Complex enterprise systems and strategic expansions are consistently shaping the landscape of B2B industries. From software integrations requiring administrative attention to significant mergers in the healthcare and industrial automation sectors, today's landscape is defined by both challenges and opportunities. Companies are doubling down on data and analytics as a key differentiator in their business models, focusing on future-ready strategies.

  • 01Microsoft Intune security baselines do not auto-update; IT admins must manually create or update profiles for Windows 11 26H2 compliance
  • 02Harbor Health’s agreement covers 27 Houston-area clinics; closing is expected at the end of 2026.
  • 03Data acquisition drives AI innovation: Schneider Electric’s $22.6B PTC deal aims to use CAD and PLM data to boost industrial AI and automation

Oct 11, 2026

Explore More Business Services Insights

Read more expert perspectives from across Business Services.

Browse Business Services Hub

About the Expert

DW
Davy Wittock

For B2B teams

Your experts could be publishing here

Stories like this one run on content MarketScale captures from real practitioners. See how your team's expertise becomes coverage in Business Services and beyond.

Book a Demo

Or call us. No forms required. We pick up. 214-945-2512