Hospitals continue to face increasingly disruptive cyberattacks that can impact patient care, clinical operations, revenue cycles, and organizational reputation. Yet many boards and executive teams are asking the same question: Are we truly prepared to withstand and recover from a significant cyber incident?
This session will help internal auditors answer that question through a resilience-focused audit lens. Attendees will examine recent healthcare cyber incidents and the lessons they reveal about gaps in preparedness, response, and recovery. Using real-world hospital scenarios, participants will learn how to translate board-level resilience concerns into auditable controls and testing procedures across identity and access management, backup and recovery capabilities, threat detection, incident response, business continuity, and recovery operations. The session will also explore tabletop exercises, recovery testing, and practical approaches for assessing resilience maturity and communicating results to executive leadership, boards, and audit committees.
While the scenarios are healthcare-focused, the cyber risks, control considerations, and resilience practices discussed are relevant across industries. Internal auditors who do not audit hospitals will still gain practical, transferable approaches they can apply when assessing cybersecurity preparedness, incident response, business continuity, and recovery in their own organizations.
Date: Monday, October 19, 2026
Time: 1:00 pm - 2:00 pm CST
Platform: Zoom - A link will be provided closer to the event
CPE credits: 1 non-NASBA CPE credit
Price: FREE to Insight Series Members