More awareness and questions after Change Healthcare cyberattack

Provider organizations first should do the basics, such as following HIPAA security rule compliance and conducting a security risk analysis, advises Carolyn Metnick, partner and Healthcare and Privacy & Cybersecurity team member at Sheppard Mullin.