This transcription is provided by artificial intelligence. We believe in technology but understand that even the smartest robots can sometimes get speech recognition wrong. 

Hey everyone, I'm Drex, and this is the 2 Minute Drill, where I do three quick stories, twice a week, all part of one great community, the 229 Cyber and Risk Community here at This Week Health. Today's 2 Minute Drill is brought to you by ORDR, the Asset Inventory and Intelligence Platform. Did you know that you can know everything about everything on your network?

Every vulnerability, every risk, every user? Everything in real time? Find out more at order. net slash healthcare. That's O R D R order. net slash healthcare. Thanks for joining me today. Here's some stuff you might want to know about. If you know Anais Santiago, Christiana Carciso, then you know that when she talks, people listen, and there's an article on ThisWeekHealth.

com slash news where she talks about deep fakes, and a video that her team made for a board presentation, only it wasn't Anais on the video. talking about cyber threats. And when she did talk, she said, I had nothing to do with that video. And at that point, she clearly had the board's attention. She's not alone.

Someone else shared a training video they had done recently with DeepFakes. It was Tracy Donegan, the CIO at MLK Community Healthcare. She showed me a DeepFake that she created of her CEO. And that video created a bit of a stir when she presented it at one of MLK's recent meetings. DeepFake tech is.

Coming on fast. So it's something you should keep an eye on, and one of the things you should be training your organization to be a little paranoid about. In this next story, it seems obvious, but it's a nugget you might want to keep in your pocket as you work on pricing out risk during your cyber budget discussions this year.

I've posted an article on the site that digs into the rising cost of cyber incidents tied to two specific factors. One is the straight up high cost of recovery. A lot of that's attributable to increased complexity in our information systems, including the large number of vendors that we use and system interconnectivity and the time and skill it takes to not only recover or rebuild those systems, but also the cost of associated forensics, again, due to complexity, multi product environments and other complicating factors we've introduced.

And the other is the high cost of increased regulatory scrutiny, both the cost of the investigations and the cost of the associated fines. The latter being something to really think about given the pending Healthcare Infrastructure Security and Accountability Act. Turns out the word accountability is right there in the title.

The bill, if passed, would remove existing caps on fines under HIPAA. The regulators are going to ask more questions and they're going to expect a lot more detail in your answers and apparently the intent is to find you hard if you don't have good answers. And the last story today, if you're running Chrome or Firefox browsers, time to do the update.

The security updates they released this week resolved 17 vulnerabilities and 10 high security flaws. You really needed to close all those open browser windows anyway. Today's 2 Minute Drill was brought to you by ORDER. Do you really know who all your devices are talking to? You can. Bring some ORDER to your enterprise.

Find out more at order. net slash healthcare. That's it for today's 2 Minute Drill. Thanks for being here. Stay a little paranoid. I'll see you around campus.