Healthcare organizations are accepting cyber risk to cut costs