HHS Launches Metrics, Website to Help Health Care Providers Improve Cybersecurity

The Department of Health and Human Services has released a document and a new website to help health care organizations embrace high-impact cybersecurity practices and have access to resources on improving their cyber posture.

On Wednesday, the HHS issued voluntary health care-specific cybersecurity performance goals to help with prioritizing and implementing the best cybersecurity practices, improving responses when an incident occurs and minimizing residual risk. The CPGs were issued as part of the Administration for Strategic Preparedness and Response program, HHS .gov reported.

Dawn O’Connell, assistant secretary for preparedness and response, said that the release of the CPG makes it easier for health care institutions to further protect their patients by integrating key cybersecurity practices into their organization.

In recent years, more malicious actors have targeted the health care sector and patient data. In 2023, the Cybersecurity and Infrastructure Security Agency disclosed that the industry faced 16 cybersecurity weaknesses commonly targeted by cyberattackers. The agency issued several recommendations to address the risks and vulnerabilities identified during the year.