Lexology January 29, 2024
The U.S. Department of Health and Human Services (“HHS”) has expanded upon its recent Healthcare Sector Cybersecurity Concept Paper (which we covered in a prior blog post), issuing cybersecurity performance goals (“CPGs”) for the healthcare and public health (“HPH”) sector. These CPGs aim to help healthcare organizations protect against cyberattacks and improve responses when attacks on critical healthcare infrastructure occur. HHS worked closely with the Department of Homeland Security’s Cybersecurity and Infrastructure Agency to develop these nationwide CPGs for the healthcare industry.
The new HPH-focused CPGs are taxonomized into two categories: essential goals, which outline minimum practices for cybersecurity performance, and enhanced goals, which provide the foundation for more advanced cybersecurity measures. The goals align with the healthcare industry cybersecurity...