Health IT Security December 14, 2023
The AHA is opposed to HHS’s proposals for mandatory cybersecurity requirements for hospitals, claiming that it would detract from the sector’s shared mission.
The American Hospital Association (AHA) expressed dissatisfaction with parts of HHS’ recently released healthcare cybersecurity strategy, which was unveiled in early December. Specifically, the AHA is opposed to HHS’ proposal of using financial penalties against hospitals to enforce cybersecurity requirements.
The newly released strategy consists of a concept paper released by HHS that centers around four actions that the department plans to take in the near future. One of these actions is providing resources to incentivize and implement new sector-specific cybersecurity performance goals (CPGs).
First, HHS plans to establish an upfront investments program to help under-resourced hospitals...