Healthcare DIVE July 8, 2024
The proposed rule would require critical infrastructure industries to report cyber incidents.
Dive Brief:
- Healthcare and hospital groups say a federal cybersecurity reporting proposal should explicitly include insurers and third-party vendors, citing the impact of the major cyberattack against medical claims clearinghouse Change Healthcare.
- The proposed rule, released by the Cybersecurity and Infrastructure Security Agency this spring, would require companies broadly in critical infrastructure industries to report cyber incidents within 72 hours of discovery and document ransom payments within 24 hours.
- CISA decided not to include sector-specific reporting criteria for insurance companies, health IT providers and labs or diagnostics facilities. But the American Hospital Association argued the exclusion doesn’t make sense, as disruption to a single company could ripple...
Today's Sponsors
Today's Sponsor