Who in the org do you expect to have that competency, and do you think hospitals aren't keeping crucial things like credentials or software that gates access to things in the cloud when literally everyone in the world is encouraged to at every turn?
The culture of organizational IT is broken because a lot of powerful companies found it profitable to break it and leave something inadequate in its place
The culture of organizational IT is broken because a lot of powerful companies found it profitable to break it and leave something inadequate in its place