“One of the things we started about 2 years ago is we realized it wasn't enough to do an annual risk assessment. or a vendor assessment.”

Transcript evidence from Bill Dougherty — INCLUDES NO DIRT, practical threat modeling for healthcare and beyond.