Electronic patient care and health insurance systems contain millions of valuable records, making them an attractive target for intruders seeking to mine sensitive information. The FBI estimates that each health record is worth $50. Some sources quote even more, upwards of $200. More than 80 percent of healthcare Chief Information Ofcers (CIOs), Chief Technology Ofcers (CTOs), and other security leaders polled by KPMG say their organizations have been victimized by at least one cyber attack in the past two years—and many still feel like sitting ducks. The reality for most healthcare CIOs and Chief Information Security Ofcers (CISOs) is this: today, it is not a question of if, but rather when, their systems will be attacked.