HITRUST issues guide to implementing NIST cybersecurity framework in health care

The Health Information Trust Alliance (HITRUST) today released a new guide to help health care organizations use its risk management framework to implement the National Institute of Standards and Technology’s framework for reducing cybersecurity risks to critical infrastructure. The document was developed in consultation with the Department of Health and Human Services’ Healthcare and Public Health Sector Coordinating Council and Government Coordinating Council, with input from the Department of Homeland Security’s Critical Infrastructure Cyber Community and others. According to HITRUST, their “mutual goal was to help organizations assess and improve their level of cyber resiliency, and provide suggestions on how to link cybersecurity with current information security and privacy risk management activities in the HPH Sector.” The guide also is available at www.aha.org/cybersecurity.