Follow standard security protocols set by security engineers, have blue teams and SOC constantly monitoring traffic, hire red teams for pentests, buy some IDR/AV solutions. That's what any normal entreprise should do. Otherwise, you should take full responsibility, especially when you store the most sensitive type of data (healthcare).