Will Upcoming HHS Cyber Regs Move Needle in Health Sector?

The upcoming weeks will see the Biden administration release new regulations mandating minimum cybersecurity standards for U.S. hospitals, based on goals set by the Department of Health and Human Services (HHS) earlier this year. These regulations are intended to enhance the healthcare sector's cyber resilience against escalating threats. While initial requirements will target hospitals, there are concerns that focusing only on hospitals overlooks the broader healthcare ecosystem, including insurers and third-party vendors who also face significant cyber threats. The administration is collaborating with sector leaders to balance effective security practices with the financial and operational realities faced by healthcare providers, particularly smaller and resource-limited institutions. Additionally, New York State is independently advancing its own stringent cybersecurity regulations for hospitals, highlighting the critical need to safeguard healthcare infrastructures against cyber threats.

Opens on bankinfosecurity