Becker's Healthcare July 1, 2021
Jackie Drees

CMS is considering adding new medical device cybersecurity requirements for hospitals participating in Medicare after receiving recommendations from the HHS Office of Inspector General, according to a June 30 GovInfoSecurity report. 

Five details: 

1. CMS does not require accreditation organizations that review acute care hospitals for Medicare participation to ask about methods they use for securing network devices from cybersecurity threats, according to a June inspector general report cited by GovInfoSecurity. 

2. Since CMS guidance on assessing hospitals’ compliance with its 23 conditions of participation in Medicare does not address medical device cybersecurity, the accreditation organizations don’t require hospitals to have cybersecurity plans for devices in place. 

3. While accreditation organizations “sometimes...

Today's Sponsors

Canton & Company

Today's Sponsors


Today's Sponsor

Crossover Health

Topics: CMS, Cybersecurity, Govt Agencies, Health IT, Health System / Hospital, Medical Devices, OIG, Provider, Survey / Study, Technology, Trends
FTC Warns Health App Vendors: Comply with the Health Breach Notification Rule or Pay the Penalty!
FTC Warns Health Apps and Connected Device Companies to Comply With Health Breach Notification Rule
Study: Ransomware attacks on healthcare can lead to higher mortality rate
Healthcare Employee Cybersecurity Training is Lacking, Report Finds
Report: 22% of providers saw death rates spike following a ransomware attack