Health ISAC Unveils a New Framework for CISOs to Manage Identity


ORMOND BEACH, FL, May 19, 2020 – Health Information Sharing and Analysis Center (H-ISAC) today released a new white paper, entitled “An H-ISAC Framework for CISOs to Manage Identity.”


Framework White Paper

The paper outlines a comprehensive Framework that health CISOs can use to architect, build and deploy a modern identity system that will protect against identity-focused attacks and also support key business drivers.  In addition, the paper details how CISOs can apply the Framework to an array of health ecosystem uses cases focused on the needs of patients, practitioners, employees and third parties.


H-ISAC Identity Initiative

Identity is the leading cause of breaches today – but many health care organizations don’t understand why securing identity is so important, or where to get started.  Last fall, H-ISAC launched an initiative to educate the health care community on this topic and equip health CISOs with tools to better approach the challenges of Identity and Access Management (IAM) in health care.

This is the second in a series of papers by the H-ISAC, designed to introduce CISOs – and the broader health care community – to an identity-centric approach to cybersecurity.  This series is focused on helping organizations of all sizes and maturity levels adapt their defense models to address the current threat landscape and become more secure.  The new Framework paper follows the first publication entitled “Identity for the CISO Not Yet Paying Attention to Identity.”

“By providing an explanation of key concepts, outlining a framework and best practices, investigating the various solutions and vendors, and highlighting the aspects of effective implementation, H-ISAC is creating a comprehensive body of work to assist CISOs in the health sector on how to best approach Identity and Access Management (IAM) and its role in managing cybersecurity risk,” said Denise Anderson, President and CEO, H-ISAC.


Download the White Paper

The paper can be downloaded at

Translate »