The Department of Health and Human Services Office of the Assistant Secretary for Preparedness and Response yesterday released a comprehensive and valuable resource to help hospitals and health systems effectively care for patients and maintain business practices and readiness should a cybersecurity incident affect the health care operational environment.

AHA staff provided input on the document, which focuses on disruptions associated with a large-scale cyberattack but also outlines strategies and principles relevant to a range of cybersecurity incidents and health care facilities.

“Having an updated, annually-tested organization-wide cyber incident response plan is key to an effective cyber incident response and to reduce the financial impact of the incident,” said John Riggi, AHA senior advisor for cybersecurity and risk. “This document is a very helpful guide to developing an organization-wide cyber incident response plan and for augmenting existing plans.”

AHA members may contact Riggi at jriggi@aha.org for more on emergency planning and readiness, or Samantha Burch at sburch@aha.org for cybersecurity public policy issues.

Related News Articles

Headline
A joint advisory issued the week of July 8 by the Cybersecurity and Infrastructure Security Agency, National Security Agency, FBI and several international…
Headline
The AHA July 2 submitted comments to the Cybersecurity and Infrastructure Security Agency on its proposed rule establishing reporting requirements for…
Headline
The Department of Health and Human Services Health Sector Cybersecurity Coordination Center June 27 issued an alert about a critical vulnerability in MOVEit, a…
Headline
A joint report released June 26 by the Cybersecurity and Infrastructure Security Agency, FBI, the Australian Cyber Security Centre and Canadian Centre for…
Headline
The Health Information Sharing and Analysis Center June 27 issued a threat bulletin alerting the health sector to active cyberthreats exploiting TeamViewer. H-…
Headline
The FBI and Department of Health and Human Services June 24 released an advisory about cyberthreat actors targeting health care organizations in attempts to…