Security Access to Electronic Email

I work in the Medical field. The organization is considering electronic email. My director is concerned about security. Several health care organizations have been vandilized or hacked in the past year. Confidentiality of patient concerns and health issues are vital. I have created the database that houses all patient concerns. Also the database that holds all the data on our physicians and risk management. I have provided passwords. Our IT Department has not worked with me on this. What are our risks?