One suspects cybersecurity risk management regulation focused on the Healthcare industry in the U.S will be moving thick and fast over the coming…

← Back to Blog

One suspects cybersecurity risk management regulation focused on the Healthcare industry in the U.S will be moving thick and fast over the coming months. Following the UnitedHealth cyber attack. As lawmakers struggle with how best to address the challenges that regulators and the health industry has with cybersecurity risk management.

On Friday 22nd March by Senator Mark R. Warner introduced the Health Care Cybersecurity Improvement Act of 2024. Legislation that would allow for advance and accelerated payments to health care providers in the event of a cyber incident, as long as they and their vendors meet minimum cybersecurity standards. “The recent hack of Change Healthcare is a reminder that the entire health care industry is vulnerable and needs to step up its game. This legislation would provide some important financial incentives for providers and vendors to do so.”

One wonders what standards the healthcare industry should introduce @Thaddeus Dziekanowski, NIST CSF, NIST SP 800-171 or go the whole hog and require the adoption of NIST SP 800-37, 30 and 39? What is clear is that cybersecurity regulation is moving quickly out of the gate in the U.S, as the effects of cyber attacks are being felt across various industry sectors.

Veritas GRC

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Rich Waite, M.Ed. George Sawyer Bob Dix Ryan Buckner Adam Perella

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7177944300607950848