Health IT Security January 24, 2024
The voluntary cybersecurity performance goals follow HHS’ recently released healthcare cybersecurity concept paper and provide a roadmap for improving security across the sector.
HHS has released sector-specific cybersecurity performance goals (CPGs) to help the sector prioritize key security actions and reduce risk. The voluntary CPGs consist of “essential” and “enhanced” goals, establishing minimum security practices as well as advanced strategies to guide organizations of all security maturity levels.
The release of the CPGs follows HHS’ December 2023 healthcare sector cybersecurity concept paper, which established an overarching cybersecurity strategy for the sector at the national level. The concept paper centered around four actions that HHS plans to take in the near future, the first of which was publishing voluntary healthcare and...