A 'security first' plan must include third-party risks

Companies should keep cybersecurity in mind when designing and architecting systems in order to protect themselves when a third-party partner is attacked, says Michael Gross, Cleveland Clinic's manager of cybersecurity intelligence.