Information security is of “high importance” to 97 per cent of US health care companies, however 72 per cent of this group say they rarely or never bother making ROI calculations for such spending. Furthermore, nearly 4 in 10 health care executives said they have less-than-adequate ability to determine whether their systems are under attack.

SOURCE: Ernst & Young