HHS program launches web resource on cybersecurity best practices

Dec 02, 2021 - 08:33 AM
HHS Logo web sized 900x400

The Department of Health and Human Services yesterday launched a central web resource for information on cybersecurity best practices recognized by its 405(d) program. A legislative provision (H.R. 7898) enacted by Congress this year allows the Department of Health and Human Services’ Office for Civil Rights to recognize certain recommended security practices when making determinations related to Health Insurance Portability and Accountability Act audits, fines and resolution agreements associated with a cyberattack, including practices recognized by the 405(d) program. AHA has urged OCR to quickly initiate rulemaking for the legislative provision, and strongly advocated for regulatory relief for hospital and health system victims of cyberattacks in testimony before a Senate hearing last year. 

“We believe our prominent advocacy on this issue assisted with the passage of H.R. 7898, and we will continue to aggressively pursue timely enactment of this much needed legislation,” said John Riggi, AHA senior advisor for cybersecurity and risk.
 

Related News Articles

Headline
CISA issues update on voluntary cybersecurity performance goals 
The Cybersecurity and Infrastructure Security Agency Dec. 11 released an update to its voluntary Cybersecurity Performance Goals, which includes measurable…
Headline
Agencies warn of state-sponsored cyberattacks from Russia, China
U.S. and international agencies are warning of potential cyberattacks on health care and other critical infrastructure from state-sponsored cyber actors in…
Headline
CISA alerts of critical vulnerability impacting free program used for building user interfaces 
A critical, unauthenticated remote code execution vulnerability known as React2Shell has been added to the Cybersecurity and Infrastructure Security Agency’s…
Headline
Resources available to help detect malicious AI schemes
The FBI has public resources available to help prevent exploitation by cybercriminals, who use artificial intelligence for deception. An infographic by the FBI…
Headline
NIST says critical vulnerability found in 7-Zip archiving software
A critical vulnerability has been identified in 7-Zip, a free software program used for archiving data, according to the National Institute of Standards and…
Headline
Agencies release guide to protect against bulletproof hosting provider cybercrimes 
U.S. and international agencies Nov. 19 released a guide on mitigating potential cybercrimes from bulletproof hosting providers. A BPH provider is an internet…