HHS program launches web resource on cybersecurity best practices

Dec 02, 2021 - 08:33 AM
HHS Logo web sized 900x400

The Department of Health and Human Services yesterday launched a central web resource for information on cybersecurity best practices recognized by its 405(d) program. A legislative provision (H.R. 7898) enacted by Congress this year allows the Department of Health and Human Services’ Office for Civil Rights to recognize certain recommended security practices when making determinations related to Health Insurance Portability and Accountability Act audits, fines and resolution agreements associated with a cyberattack, including practices recognized by the 405(d) program. AHA has urged OCR to quickly initiate rulemaking for the legislative provision, and strongly advocated for regulatory relief for hospital and health system victims of cyberattacks in testimony before a Senate hearing last year. 

“We believe our prominent advocacy on this issue assisted with the passage of H.R. 7898, and we will continue to aggressively pursue timely enactment of this much needed legislation,” said John Riggi, AHA senior advisor for cybersecurity and risk.
 

Related News Articles

Headline
NIST says critical vulnerability found in 7-Zip archiving software
A critical vulnerability has been identified in 7-Zip, a free software program used for archiving data, according to the National Institute of Standards and…
Headline
Agencies release guide to protect against bulletproof hosting provider cybercrimes 
U.S. and international agencies Nov. 19 released a guide on mitigating potential cybercrimes from bulletproof hosting providers. A BPH provider is an internet…
Headline
Agencies release updated guidance to combat Akira ransomware following recent attacks
A joint advisory issued yesterday by U.S. and international agencies provides updated guidance to defend against the Akira ransomware group, which…
Headline
Agencies release guidance on Microsoft Exchange server best practices
The National Security Agency, Cybersecurity and Infrastructure Security Agency and international partners released joint guidance Oct. 30 on best practices for…
Headline
Microsoft issues security update addressing critical vulnerability impacting Windows server services 
Microsoft has released a security update to address a critical remote code execution vulnerability impacting multiple versions of Windows Server Update…
Headline
2025 Cybersecurity Year in Review, Part Two: Mitigating Third-Party Risk, Ensuring Clinical Continuity and Addressing AI Risk
In part two of a recent blog, AHA National Advisor for Cybersecurity and Risk John Riggi and AHA Deputy National Advisor for Cybersecurity and Risk Scott Gee…