HealthIT Answers February 2, 2024
The healthcare industry faces rising cybersecurity risks that threaten patient safety and care. According to the U.S. Department of Health and Human Services (HHS), large healthcare data breaches are up 93% from 2018 to 2022, increasingly involving ransomware. These cyberattacks have disrupted hospital operations and delayed needed care.
To address this growing problem, HHS laid out a strategy centered on four main actions in their December 2023 report:
1. Establish voluntary cybersecurity performance goals for the healthcare sector.
Together, the Healthcare and Public Health Sector aim to create Cybersecurity Performance Goals (HPH CPGs), which will streamline cybersecurity standards and help healthcare organizations prioritize cybersecurity practices.
2. Provide resources to incentivize and implement these cybersecurity practices.
HHS will work with the...