Should vendors have a security team?

Every vendor in the employer-sponsored healthcare industry should have a security team when handling sensitive patient information like PHI. This team should actively review, implement, and monitor the security safeguards applied to their physical and digital environments to limit or contain the impact of a potential cybersecurity event and ensure the delivery of services that align with industry best practices.