Many healthcare organizations are failing to employ even basic security measures such as antivirus and anti-malware software. According to the study, 15.1% of acute care providers and 9.7% of non-acute care providers did not use anti-virus or anti-malware software.