New analysis of healthcare cyber losses suggests that foundational controls remain the most effective at reducing risk.