The Department of Health and Human Services yesterday launched a central web resource for information on cybersecurity best practices recognized by its 405(d) program. A legislative provision (H.R. 7898) enacted by Congress this year allows the Department of Health and Human Services’ Office for Civil Rights to recognize certain recommended security practices when making determinations related to Health Insurance Portability and Accountability Act audits, fines and resolution agreements associated with a cyberattack, including practices recognized by the 405(d) program. AHA has urged OCR to quickly initiate rulemaking for the legislative provision, and strongly advocated for regulatory relief for hospital and health system victims of cyberattacks in testimony before a Senate hearing last year. 

“We believe our prominent advocacy on this issue assisted with the passage of H.R. 7898, and we will continue to aggressively pursue timely enactment of this much needed legislation,” said John Riggi, AHA senior advisor for cybersecurity and risk.
 

Related News Articles

Headline
The Food and Drug Administration yesterday released a safety notice announcing a software patch is available to address cybersecurity vulnerabilities in…
Headline
The Cybersecurity and Infrastructure Security Agency, FBI, Department of Defense Cyber Crime Center and the National Security Agency June 30 released a fact…
Headline
The Centers for Medicare & Medicaid Services today announced it has identified a fraud scheme targeting Medicare providers and suppliers. CMS said scammers…
Headline
The FBI, Cybersecurity and Infrastructure Security Agency and Australian Cyber Security Centre June 4 released an advisory on updated actions and tactics used…
Headline
The National Security Agency, Cybersecurity and Infrastructure Security Agency and international partners May 22 released guidance on securing data used for…
Headline
The FBI, along with the National Security Agency and other international cybersecurity agencies, this week released a joint agency advisory on cyber operations…