AXIOS July 8, 2024
A proposed rule that would require the nation’s most critical industries to more quickly report cyberattacks is raising the ire of the health care industry, which claims the new directives could actually hinder its response in a crisis.
Why it matters: Cyberattacks have sent shockwaves across the health care industry, but regulators and providers don’t agree on how to get a handle on the problem.
Driving the news: The comment period for new rules surrounding cyberattacks, which closed last Wednesday, illustrates that division.
- The Cyber Incident Reporting for Critical Infrastructure Act of 2022 called for companies and organizations to report cyberattacks within 72 hours and ransoms paid within 24 hours.
- In rules proposed in April to implement the act,...