STCB - Bob Chaput

Stop The Cyber Bleeding:

Protect patients from harm and defend your healthcare organization with a robust enterprise cyber risk management program.

Cyber threats are ever increasing, particularly in the healthcare sector. Risks to patient safety are rising at an exponential rate, yet most healthcare organizations are underprepared to deal with these threats. Safeguarding today’s patients and your organization is not just an IT problem. It’s time to stop the cyber bleeding with this definitive guide to enterprise cyber risk management.

Bob Chaput, a leading authority on cybersecurity and enterprise risk management, brings an essential resource for healthcare leaders and board members. Equipping leaders with the knowledge and tools to establish a robust enterprise cyber risk management (ECRM) program, this book gives valuable insight into protecting patient data, complying with regulations, and enhancing your organization’s reputation and finances. Focusing on optimizing five core capabilities—sound governance, skilled people, standardized processes, enabling technology, and organization-wide engagement, this book is your guide to building a cyber risk–aware culture and protecting your organization from costly and devastating cyberattacks.

In this easy-to-digest guide, learn how to:

Establish, implement, and mature your organization’s ECRM program as part of your overall business strategy.
Understand the unique roles, responsibilities, and information needs of every executive and board member for effective ECRM oversight.
Conduct thorough cyber risk assessments using the NIST risk-assessment process to identify and prioritize risks, ensuring effective resource allocation.
Align cybersecurity initiatives with business goals to enhance patient safety, regulatory compliance, and organizational reputation.
Implement 6 initial actions to establish or improve your ECRM program, making the process manageable and actionable.

Stop the Cyber Bleeding cuts through the jargon to bring timely and practical cyber risk management into clear focus. This pragmatic road map for governing and maturing an ECRM program in today’s cyber risk environment gives healthcare leaders an edge to leverage security as a competitive advantage and to enhance patient trust. Stop the Cyber Bleeding will lead your organization toward a secure and resilient future.

Available Anywhere Books Are Sold:

Use any of the retailer icons below to purchase your copy:

Bob Chaput’s Stop the Cyber Bleeding is a needed call to action. It is a thoughtful explication of the risks inherent in our new digital world. Unlike most such narratives, it also offers a practical approach to manage and mitigate those risks.

—Mark Reynolds, President and CEO, Risk Management Foundation of the Harvard Medical Institutions Incorporated (CRICO)

Bob has captured lightening in a bottle with his book Stop the Cyber Bleeding! Cyber risk management is often an afterthought in an organization. Bob articulates a well laid out argument for engaged leadership from the boardroom on down with example after example of the pitfalls for not taking risk management and more specifically cyber threats serious. As the founder of Clearwater Compliance he has spent years developing the customized software toolkits and resources to help your company identify and manage its cyber risk footprint. The book provides a refreshing and necessary perspective to help get you started in the right direction today!

—Amazon 5 Star Review

“Cybersecurity” is the kryptonite of too many healthcare company board meetings. Otherwise intelligent and accomplished people can be intellectually paralyzed by the mere mention of the term. Yet, failure to appreciate cybersecurity risk and ensure appropriate resource allocation too often leads to an even more painful experience: the post-breach emergency meeting. In Stop the Cyber Bleeding, Bob Chaput clearly and concisely arms executives and board members with what they need to know and the questions they need to ask to exercise effective oversight in this critical area. Whether your goal is to build a best-in-class Enterprise Cyber Risk Management (ECRM) program or, more modestly, simply to keep your company out of the hacker’s crosshairs and off the front pages of the newspaper, Stop the Cyber Bleeding is a “must read” now.

—Ralph W. Davis, serial healthcare board member/advisor | Operating Partner, The Vistria Group

In his excellent, practical, and timely book, Bob Chaput addresses multiple aspects of ECRM. He first describes the unique challenges of ECRM in today’s healthcare environment, given the current cyber risks and regulations. He then offers a well-rounded plan of action on how C-suite executives can provide leadership and oversight for their organization’s ECRM efforts. This plan of action is tailored to their specific cyber risks, based on the NIST framework, and includes how to establish an ECRM program and fund it. He finally provides several concrete examples of the benefits of establishing an ECRM program. This book is an extremely valuable guide and should be in the library of every healthcare institution C-suite executive, board member, and IT leader.

—Benoit Desjardins, MD, PhD, FAHA, FACR, CISSP | Associate Professor, Department of Radiology, Penn Medicine

I know from firsthand experience that the concepts, principles, and actions presented in Stop the Cyber Bleeding work to engage and inspire top leaders and board members alike to seriously take up the matter of cyber risk management as an enterprise issue. It’s terrific to see Bob codify his practical risk management skills, knowledge, and experience into a book that’s easy to read and use. His insightful treatment of the transformation required as a behavior-change matter is incredibly relevant for healthcare organizations. Given the increasing cyber liabilities facing healthcare organizations and their C-suite executives and board members alike, Stop the Cyber Bleeding is a must-read today.

—Gregory J. Ehardt, JD, LL.M. | Vice President, Compliance and Privacy, CHRISTUS Health

In this book, Bob Chaput provides an excellent summary of the major issues facing healthcare entities with regard to cyber risk management and related security compliance. Bob includes helpful talking points to involve all members of a healthcare organization’s workforce in conversations about cybersecurity, including, importantly, the C-suite and board.

—Iliana Peters, JD, LLM, CISSP | Shareholder, Polsinelli PC, Former Acting Deputy Director HHS Office for Civil Rights

Chaput hits it out of the park with his book Stop the Cyber Bleeding. Bob’s decades of risk management experience detailed in this book offer a must-read tutorial for every industry executive. Bob conveys lessons learned from the trenches while delivering street-smart, pragmatic, and tangible strategies toward unraveling the complexities of Enterprise Cyber Risk Management. More importantly, Bob provides evidence for what we cybersecurity professionals have been stating for years: Cyber risk management is not a department within IT—it is an enterprise issue that demands a seat (and a strategy) at the boardroom table!

The case for ECRM is decisively made; timely and relevant. Successful cyber exploits frequently capitalize on the failure of organizations to focus on, and address, fundamentals. This book is an instruction manual on how to get all of the fundamentals sustainably right. Clear and straight forward guidance for senior executives and board members alike. Ending each section with not only suggested questions to ask, but why and how to ask them is pure genius. Through realistic scenarios and firsthand experiences, Bob takes the reader on a sobering trip across the healthcare landscape. This is a must-read for executives who influence cyber risk and cybersecurity governance.

—Fernando Martinez, Ph.D., CHCIO, CISSP, CISA, CISM, CGEIT | Chief Strategy Officer THA, President and CEO THA Foundation, Texas Hospital Association

Available Anywhere Books Are Sold:

Bob Chaput’s Stop the Cyber Bleeding is a needed call to action. It is a thoughtful explication of the risks inherent in our new digital world. Unlike most such narratives, it also offers a practical approach to manage and mitigate those risks.

See Also: