New York State's New Cybersecurity Rules Set National Benchmark for Hospitals

New York State has introduced new cybersecurity regulations for hospitals, effective October 1, that could set a precedent for healthcare providers across the United States. Key requirements include multifactor authentication, risk analysis, incident response protocols, and the appointment of a qualified Chief Information Security Officer (CISO). This shift emphasizes the need for experienced cybersecurity leadership amid a shortage of qualified candidates in the healthcare sector. As other states may adopt similar regulations, compliance with New York's standards is likely to become a focal point for insurers, potentially elevating overall cybersecurity practices in healthcare.

Opens on govinfosecurity.com