Cybersecurity Act of 2015 (CSA)
HHS develops consensus-based best practices and methodologies to strengthen the Healthcare & Public Health (HPH) sector’s cybersecurity posture against cyber threats. Through partnerships between government and industry, HHS has released TWO vetted landmark publications for the sector to utilize in their cybersecurity defense. HHS and the Task Group actively continue to develop new products to help further strengthen our sector.
Health Industry Cybersecurity Practices (HICP)
Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients (HICP 2023 Edition) outlines the top threats facing the HPH Sector. Developed with every stakeholder in mind, organizations ranging in size from small to large can benefit from the resources and best practices provided in the main document and additional two technical volumes. HICP aims to provide organizations with recommendations and best practices to prepare and fight against cybersecurity threats that can impact patient safety.
HICP MainTech Vol 1Tech Vol 2
Operational Continuity – Cyber Incident (OCCI) Checklist
The Operational Continuity-Cyber Incident (OCCI) checklist serves as an action plan designed to assist operational staff and executive management in effectively responding to and recovering from an extended enterprise outage caused by a severe cyber-attack. This checklist, an integral component of your broader Incident Response Plan (IRP), is specifically tailored to address the critical first 12 hours following a cyber event.
OCCI Checklist (PDF)
Hospital Cyber Resiliency Landscape Analysis
The Hospital Resiliency Landscape Analysis conducted a deeper investigative study into both methods that cyber adversaries are using to compromise US hospitals, disrupt operations and extort them for financial gain. It then benchmarked these results to specific practices in the Health Industry Cybersecurity Practices (HICP) in order to outline the most meaningful protections for these specific threats.
Landscape Analysis (PDF)