This is a difficult question to answer, because there is not one single schedule that will work for every facility. Additionally, if a new threat arises, then it may be necessary to quickly implement an update regardless of when the most-recent cybersecurity risk assessment was performed.
As part of our cybersecurity consulting services, we provide ongoing advice regarding necessary updates to our clients’ cybersecurity programs. If your hospital’s data are at risk due to a new malware application, phishing scam, or other threat, we will let you know, and we will advise you accordingly.