Lexology April 24, 2023
Cybersecurity is not simply a technical issue of interest only to information technology departments. Cybersecurity issues create risk throughout health care entities and must be managed as a core business risk; at a minimum, they impact patient safety, business continuity, reputations, regulatory compliance, and economics.
On 17 April 2023, the US Department of Health and Human Services (HHS) released three cybersecurity tools specific to the health care and public health (HPH) sector, namely, a cyber awareness document, cyber educational tools, and an industry risk analysis. These important resources are available here and are discussed below.
A. Health Industry Cybersecurity Practices (HICP) 2023 Edition
The HICP is intended to be a starting point for use within the HPH sector to implement...