Health-ISAC Threat Assessment Survey 2025-2026

Health-ISAC will be publishing an annual Health Sector Threat Landscape Report that will include a look back at the top threats in 2025 and a look ahead into 2026. We'll be discussing cybercriminals, nation-state actors, hacktivists, insider threats, and more. We're seeking your input as to the top threats from this past year and what you are concerned about into 2026. Your input is extremely important and greatly appreciated for this project. We want to hear as many perspectives as possible, from analysts to executives. Member organizations are encouraged to share this survey internally to provide the widest reaching coverage.

We'll share the survey results with Health-ISAC members after this survey closes and the Annual Health Sector Threat Landscape report will be published in February 2026. The individual responses recorded are completely confidential and will only be used in the aggregate. The individual responses will be recorded as unattributed and may be shared with outside partners or agencies.

Demographic Questions

Question Title

* 1. In what business lines does your company operate? (Choose all that apply)

Healthcare Providers / Clinicians

Payers / Insurance

Medical Device Manufacturing

Pharma / Biotechnology

Academia

HIT (Health Information Technology)

Pharmacy

ISO (Independent Service Organization)

Blood and Organ Bank

Telehealth

Laboratory

Medical Technology

HIE (Health Information Exchange)

Revenue Cycle Management

Public Sector

Other (please specify)

Question Title

* 2. How many people are in your organization?

Less than 1000

1001 to 5000

5001 to 10,000

10,001 to 25,000

25,001 to 50,000

50,001 to 100,000

Greater than 100,000

Question Title

* 3. [OPTIONAL] Please provide the value of your budget dedicated towards your cybersecurity program (e.g., headcount, solutions/tools):

Less Than $500,000

$500,000-$1,000,000

$1,000,000 - $5,000,000

$5,000,000 - $10,000,000

$10,000,000 - $25,000,000

$25,000,000 - $50,000,000

Greater Than $50,000,000

Unsure

Question Title

* 4. In your position, what business unit do you primarily work in? (Choose only one)

Primary Care / Specialty Care / Clinic

Payers / Insurance

Medical Device Manufacturing

Pharma / Biotechnology

Academia

HIT (Health Information Technology)

Pharmacy

ISO (Independent Service Organization)

Blood and Organ Bank

Telehealth

Laboratory

Medical Technology

HIE (Health Information Exchange)

Revenue Cycle Management

Public Sector

Hospital or Health System

[BioMed] Healthcare Technology Management

Other (please specify)

Question Title

* 5. What is your role in your business unit?

Executive Leadership (CEO, CFO, COO, CTO)

Chief Security Officer (CSO)

Chief Information Security Officer (CISO)

Corporate Communications / Public Relations

Disaster Recovery / Business Continuity

Finance

Human Resources (HR)

Information Security

Information Technology

Legal

Operations

Physical Security

HTM / Clinical Engineering / Biomed

Facility / Physical Plant

Governance Risk and Compliance

Risk Management

Regulatory Affairs