Which of the following issues increases security risks in healthcare organizations?

• A. Healthcare staff are mostly female
• B. Staffing levels are too high
• C. Patients have insurance
• D. Hospitals have robust cybersecurity

Answer: (A)

Security risk in healthcare primarily comes from people and processes: how staff handle PHI, follow access controls, respond to phishing, and manage devices and data. Human factors—such as unphished social interactions, weak passwords, leaving workstations unlocked, or improper handling of sensitive information—drive most breaches, while technology, when well implemented, helps reduce those risks.

The statement about healthcare staff being mostly female is not a recognized risk factor in security practice. Risk is not about gender or demographics; it’s about behavior, training, policies, and how well access is controlled. The other options either describe protections (robust cybersecurity) or are unrelated to security risk (patients’ insurance). In practice, to reduce risk you’d focus on training, strong access controls, incident reporting, and effective cybersecurity measures rather than demographic factors.