Health care facilities this year should prepare for new cybersecurity compliance goals from regulators—likely requiring additional investments and posing greater enforcement risks.