CIOs must maintain the confidentiality, integrity, and availability of patient data to protect patient safety and an organization's reputation. 

Assessing and reducing the risk of this data getting compromised is challenging.