Healthcare Innovation July 7, 2024
MGMA, WEDI urge CISA to align its reporting timelines and requirements with other federal partners, including the HHS Office for Civil Rights, to decrease the administrative burden
Stakeholders in healthcare are proposing changes to the Cybersecurity and Infrastructure Security Agency’s proposed rule on cyber incident reporting requirements under the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA).
CISA proposes to institute reporting requirements for significant cyber events for critical infrastructure sectors including healthcare.
The Medical Group Management Association expressed concerns about “burdensome, confusing, and duplicative reporting requirements that may impact medical groups’ ability operate effectively, especially in the midst of a significant cyberattack.”
Noting that medical groups are already subject to various reporting requirements under HIPAA, MGMA suggests...