US Senators Propose Mandatory Cybersecurity Standards for Healthcare
Summary
A proposed US bill would require healthcare organizations to meet cybersecurity standards, undergo annual audits and stress tests, and face stronger penalties for noncompliance. The article links the proposal to attacks disrupting care and exposing patient data.
Key points
- Senators Ron Wyden and Mark Warner introduced the proposed Health Infrastructure Security and Accountability Act.
- The bill would set mandatory cybersecurity benchmarks for healthcare providers, health plans, clearinghouses, and their business associates.
- Proposed requirements include annual independent cybersecurity audits and stress tests.
- The bill would remove caps on fines for large corporations that fail to comply and require annual executive certifications.
- It proposes $1.3 billion in financial support to help hospitals, particularly rural and underserved facilities, upgrade systems.
- The article cites the Change Healthcare ransomware attack and other healthcare incidents as context for the proposal.
- The article recommends healthcare organizations strengthen defenses, but also promotes Huntress managed security services.
Article Details
- Event Type
- Introduction of proposed healthcare cybersecurity legislation following reported cyberattacks and breaches in the sector.
- Impact
- The proposed Health Infrastructure Security and Accountability Act would establish mandatory cybersecurity standards for healthcare providers, health plans, clearinghouses, and business associates; require annual independent audits and stress tests; increase penalties for non-compliance; require annual executive compliance certifications; and allocate $1.3 billion to support upgrades, particularly for rural or underserved hospitals. The article reports that the Change Healthcare ransomware attack affected over a third of Americans and disrupted prescriptions and healthcare payments. It also describes operational disruptions and patient-data exposure from prior attacks and breaches.
People
Josh CormanQuoted as a healthcare cybersecurity expert and CISA COVID task force leader on executive accountability.Mark WarnerU.S. Senator who introduced the proposed Health Infrastructure Security and Accountability Act with Ron Wyden.Ron WydenU.S. Senator who introduced the proposed Health Infrastructure Security and Accountability Act with Mark Warner.