We believe healthcare organizations should restructure the information security function to report directly to the board.

FORBES: Why Healthcare Data Breaches Are a C-Suite Concern

That said, the going forward approach then is to have a process for reporting seemingly disparate small security issues, and having a person to report them to (in most organizations a chief information security officer or CISO) who can put them all together in the context of a larger attack.

FORBES: Discussing Gawker's Breach With Founder Nick Denton

And we must hunt down and report any breaches in information security.

FORBES: New Privacy Rules May Distract Doctors From Patient Care