Well worth a read if you are a U.S healthcare provider covered by HHS.

← Back to Blog

Well worth a read if you are a U.S healthcare provider covered by HHS. As HHS proposes updates to HIPAA.There are to many updates to discuss. Points of note are1. Conduct risk assessments.2. Develop, revise and publish the organisations asset inventory and network map. At least every 12 months.3. Implemented network segregation.4. Establish and test incident response plans.5. Ensure that covered entities and associates certify security safeguards have been implemented to protect ePHI every 12 months.6. Conduct Vulnerability scanning every 6 months.7. Encrypt ePHI at rest and in transit.8. Conduct compliance audits at least once every 12 months to ensure their compliance with the rule.9. Require business associates to notify covered entities with 24 hours of the activation of contingency pans.One wonders if this update would have made it to the Federal Register without a node from the incoming administration? U.S healthcare infrastructure is CNI and as demonstrated in 2024 the effects of cyber attacks are a significant consideration.@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal KhanVeritas GRC U.S. Department of Health and Human Services (HHS)#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7278710970762330112