What’s happening: The U.S. Department of Health and Human Services’ (HHS) proposed revisions to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule aim to strengthen cybersecurity protections for electronic protected health information (ePHI).
What else to know: Comments on the proposed rule are due by March 7.
Cybersecurity is integral to hospital emergency response efforts, as it protect sensitive information, maintains operational continuity, prevents disruptions, combats disinformation, secures critical infrastructure, and facilitates collaboration among stakeholders.
2024 Disaster Conference
This presentation covers best practices for integrating information security and emergency management professionals in planning and resiliency efforts against cyber threats posed against partners in the health care sector.
2023 Disaster Conference
Cyberattacks against the health sector are proliferating, causing loss of data, connectivity, operations, reputation, money, and ultimately, patient safety. Attendees will learn about the Health Sector Coordinating Council and the many free best practice and guidance publications the Council has created for scalable cybersecurity preparedness and response programs.
A helpful tool providing cybersecurity information and resources for health care organizations, tools to assist with gap analysis and state support systems, a mitigation checklist, and suggestions for where to report cyberattacks, as well as share information.
Healthcare & Public Health Sector Coordinating Councils
This Operational Continuity-Cyber Incident (OCCI) checklist provides a flexible template for operational staff and executive management to respond to and recover from an extended enterprise outage due to a serious cyber attack.
This post has been archived and contains information that may be out of date.
.
The Hospital Quality Institute is reminding members that on June 14, it will host a webinar on cybersecurity with the America Hospital Association’s (AHA) John Riggi.
This post has been archived and contains information that may be out of date.
Registration is now open for CHA’s 2023 Disaster Planning Conference, which will feature a complete breakout track dedicated to cybersecurity in hospitals. A disaster can come in many different forms, and sometimes the disaster is a cybersecurity breach.
This post has been archived and contains information that may be out of date.
The Department of Health and Human Services Office of Civil Rights has issued a request for information on the security practices of covered entities and its determinations on fines, audits, and remedies to resolve potential violations of the 1996 HIPAA Security Rule.
This post has been archived and contains information that may be out of date.
What’s happening: The U.S. Department of Health and Human Services (HHS) has released voluntary health care-specific cybersecurity performance goals (CPGs) to help organizations prioritize implementation of high-impact cybersecurity practices.
What else to know: The CPGs include 10 essential and 10 enhanced goals. They are based on multiple cybersecurity frameworks and directly address common attack vectors against U.S. domestic hospitals as identified in the 2023 Hospital Cyber Resiliency Landscape Analysis.