Health IT Security February 1, 2024
The HHS cybersecurity performance goals are voluntary at the moment but will likely be the basis for future cyber mandates in healthcare.
HHS recently unveiled healthcare-specific cybersecurity performance goals (CPGs) with the intent of helping the sector prioritize the implementation of key security best practices.
On their surface, the voluntary CPGs are straightforward, consisting of “essential” and “enhanced” goals that many healthcare organizations have likely already implemented, such as multifactor authentication and basic incident planning and preparedness.
While the goals themselves may not be revelatory, their existence in this format, their voluntary nature, and how they fit into HHS’ overall healthcare and public health (HPH) sector security strategy are a significant step forward for the industry and are a sign...