The Department of Health and Human Services Office of the Assistant Secretary for Preparedness and Response yesterday released a comprehensive and valuable resource to help hospitals and health systems effectively care for patients and maintain business practices and readiness should a cybersecurity incident affect the health care operational environment.

AHA staff provided input on the document, which focuses on disruptions associated with a large-scale cyberattack but also outlines strategies and principles relevant to a range of cybersecurity incidents and health care facilities.

“Having an updated, annually-tested organization-wide cyber incident response plan is key to an effective cyber incident response and to reduce the financial impact of the incident,” said John Riggi, AHA senior advisor for cybersecurity and risk. “This document is a very helpful guide to developing an organization-wide cyber incident response plan and for augmenting existing plans.”

AHA members may contact Riggi at jriggi@aha.org for more on emergency planning and readiness, or Samantha Burch at sburch@aha.org for cybersecurity public policy issues.

Headline
The Cybersecurity and Infrastructure Security Agency, National Security Agency and international partners have released guidance on adopting agentic artificial…
Headline
A joint advisory released April 23 from U.S. and international cybersecurity agencies, including the Cybersecurity and Infrastructure Security Agency, FBI,…
Headline
FBI Co-deputy Director Andrew Bailey discussed a rise in cyber and physical threats impacting health care. He discussed health care as the top critical…
Headline
Health care and public health was the top sector targeted for cyberthreats in 2025, according to the FBI’s latest annual report on internet crimes. There were…
Headline
The Cybersecurity and Infrastructure Security Agency released an alert March 27 on a vulnerability in F5 BIG-IP Access Policy Manager software that is being…
Headline
The FBI released an alert March 20 warning of a technique used by cyber actors working on behalf of the Iranian government to conduct malicious cyber activity…