CISA, HHS Unveil New Health Care, Public Health Cybersecurity Toolkit

The Cybersecurity and Infrastructure Security Agency and the Department of Health and Human Services have launched a new toolkit to help health care organizations protect their systems from cyber-enabled threats.

The Cybersecurity Toolkit for Healthcare and Public Health consolidates several cybersecurity resources, including the CISA’s Cyber Hygiene Services and the HHS’s Health Industry Cybersecurity Practices and HPH Sector Cybersecurity Framework Implementation Guide. The resources identify and protect against known vulnerabilities, outline effective cybersecurity practices for health care organizations and help improve cyber resilience.

The toolkit was unveiled during a roundtable discussion focused on health care and public health cybersecurity, CISA said.

The HPH toolkit is one of several guidance and toolkits CISA released in October alone.

Recently, the agency released guidance on how small and medium-sized businesses can craft resilient information and communication technology supply chain risk management plans. The guidance includes eight steps that would help acquirers, integrators and suppliers detect, mitigate and recover from supply chain threats.

A week before the ICT supply chain guidance was released, CISA added new resources to the Public Safety Communications and Cyber Resiliency Toolkit to cover topics like cyber incidents, ransomware response and electromagnetic pulse disruptions.