NIST issues cyber risk management tool; HHS task force seeks input

The National Institute of Standards and Technology today released the Baldridge Cybersecurity Excellence Builder, a draft tool to help organizations assess how effectively they use the NIST Cybersecurity Framework to manage cybersecurity risk. According to the agency, the tool blends the organizational performance evaluation strategies of the Baldrige Performance Excellence Program with the risk management mechanisms of the Cybersecurity Framework, allowing organizations to maximize the framework’s value and manage all areas affected by cybersecurity as a unified whole. NIST will accept comments on the draft tool until Dec. 15 at baldrigecybersecurity@nist.gov. Earlier this week, the Department of Health and Human Services’ Health Care Industry Cybersecurity Task Force asked the health care, patient and technology communities to share their thoughts on how best to protect the health care system from cybersecurity threats. “We will be listening to any responses that you make on this blog post, we will be hosting a discussion on Reddit soon, and we will be listening to tweets tagged with the hashtag of #healthcybersecurity,” the panel said in a post at The Health Care Blog. For additional hospital and health system resources to reduce and manage cyber risks, visit www.aha.org/cybersecurity.