Initially, it may look as though security in the healthcare industry is in a bleak state. According to the ACR, healthcare and pharmaceuticals rank near the bottom of all industries with regard to the maturity of their security operations. The report notes that 28 percent of all healthcare applications rank as high risk, 56 percent as medium risk, and only 16 percent as low risk.