In addition, strongly recommend reading this post about cybersecurity in healthcare - https://www.cleveroad.com/blog/healthcare-cybersecurity-framework