Medicare and Medicaid looks to move beyond risk-based cybersecurity

The Centers for Medicare and Medicaid Services is moving beyond just compliance to risk-based cybersecurity, with a focus on continuous monitoring and attack surface management. It’s a transition officials say is meant to make the agency’s defensive posture more threat-informed. Keith Busby is the chief information security officer at CMS. He talked about the transition with Federal News Network’s…