To understand the level of risk, it is necessary to grasp the unique environment of health care IT. The average-size hospital manages more than 250 applications, including medical equipment as well as scheduling, billing, laboratory, and surgical applications, all from different vendors.