Healthcare provider, payer, software and life sciences organizations face increasing risks regarding the protected health information entrusted to them by their patients. The growth in electronic health records (EHRs), government regulation, technology risks, and recent efforts by state-sponsored hacking groups amplify the need for healthcare organizations to mature their information security programs. At the same time, the demands on healthcare IT resources are at an all-time high as organizations struggle to balance managing risk with new or optimizing business-driven initiatives.