From recent discussions in healthcare it is clear that conversations with the Board are not as prevalent as they need to be. At the same time the pressure on the IT teams to add devices and technologies to their network to support both medical and patient needs in very short timeframes, often means the potential security consequences are 'overlooked' because of lack of funding. This means that the security posture of healthcare facilities is getting no better and may be declining in some instances. This will only get worse in future years if healthcare management doesn't accept that medical staff, patients and others who interact with healthcare will increase their connectivity requests dramatically and that to secure this new constantly evolving environment requires their commitment, support and funding. Failure to provide these will, as Richard points out, result in "a hospital system to be sued out of business following a massive breach of patient, financial or other critical healthcare information"and potentially expose enormous amounts of private patient information – something no hospital system wants to happen.