MedCity News June 2, 2025
The bottom line is that while recognizing there is an issue is vital, too many healthcare organizations are counting on solutions that cannot and will not provide a sufficient line of defense.
Earlier this year, the Department of Health and Human Services (HHS) issued a Notice of Proposed Rulemaking (NPRM) to amend the HIPAA Security Rule. The notice focused on modernizing security practices to better guard electronic Protected Health Information (ePHI) from cybersecurity attacks by taking steps to strengthen key defenses. This includes areas such as risk analysis and management, access controls, audit controls and monitoring, incident response and reporting, and more.
These steps are important as healthcare organizations are under attack. The U.S. Department of Health and Human Services’...







