Year of the CISO

Borten’s prediction for headlines for 2012: We will see more breaches reported and more state attorneys general prosecute them. “It is unfortunate, but well-publicized legal cases and fines get senior management’s attention,” she says. Also, new regulations are expected to make business associates’ subcontractors that touch PHI directly responsible for being HIPAA-compliant themselves. “That is enormously important,” Borten adds, “because it is a huge vulnerability today.”