Imagine this: You’re a large healthcare provider whose staff is having trouble accessing vital records in your hospital’s computer network. Your IT department begins an immediate investigation and determines the cause to be a malware attack. Worse yet, the attackers are demanding ransom to obtain the decryption key. How do you respond?

For Hollywood Presbyterian Medical Center, this was no fire drill. On Feb. 17, the hospital disclosed that it had experienced a malware attack earlier that month, which temporarily affected the operation of its computer network. Specifically, the malware locked access to certain computer systems by encrypting files, preventing hospital staff from sharing communications electronically.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...