HHS Releases Voluntary Cybersecurity Performance Goals

The AHA has also provided input on the resiliency report.

By HFT Staff


The Department of Health and Human Services released voluntary Cybersecurity Performance Goals (CPGs) for the sector, which include 10 “essential” and 10 “enhanced" goals. The healthcare CPGs are based on multiple cybersecurity frameworks and directly address common attack vectors against U.S. domestic hospitals as identified in the 2023 Hospital Cyber Resiliency Landscape Analysis. The American Hospital Association (AHA) provided input on the resiliency report and the draft goals as a member of the Health Sector Coordinating Council’s Cybersecurity Working Group.

“America’s hospitals and health systems are dedicated to protecting their patients and workforce against cyberattacks that can disrupt patient care and erode privacy by the loss of personal healthcare data,” says Rick Pollack, AHA president and CEO. “To that end, the AHA supports voluntary consensus-based cybersecurity practices, such as those announced by the Department of Health and Human Services. These cybersecurity performance goals are targeted at defending against the most common tactics used by cyber adversaries to attack healthcare and related third parties, such as exploitation of known technical vulnerabilities, phishing emails and stolen credentials. We recommend that all components of the healthcare sector implement these practices including third-party technology providers and business associates.” 



February 1, 2024


Topic Area: Information Technology , Security


Recent Posts

Healthy Buildings, Healthy Futures: IWBI and Georgetown Convene Policy Leaders in D.C.

The second annual Healthy Building Policy Summit unites stakeholders to advance policies that make every building a catalyst for well-being, resilience and thriving communities.


California Bill Could Shift Workers' Comp Burden for Hospitals

SB 632 would presume more than half of hospital injury claims are job-related, raising cost, staffing and liability concerns for facilities leaders.


Sturdy Health Announces Emergency Department Expansion and Modernization

The first floor emergency department will be 38,000 square feet.


Sabine County Hospital Falls Victim to Data Breach

There is no evidence suggesting that any of this information was accessed or misused.


Rethinking Sinks with Infection Control in Mind

Innovations in infection prevention and control can kill microbes and prevent the growth of harmful biofilms.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.