Healthcare organizations now recognize that they are a significant target for cybercriminals. Now they must take additional steps to protect their data and networks. Raising the performance bar—and seeking to match other high-performing industries like the financial sector—would represent a strong step by the healthcare sector in reducing risk to protected health information.