The bill directs the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Health and Human Services to coordinate on cybersecurity for the healthcare and public health sector. It requires CISA to provide cybersecurity training for owners and operators of covered assets, such as healthcare technology and services. It also requires an update to the sector’s risk management plan, including reviews of risks to medical devices, patient records, smaller and rural organizations, and healthcare cybersecurity staffing. The Department may identify high-risk assets and use a list of them to prioritize available resources. The bill also requires reports to Congress about federal support and coordination.
Healthcare organizations and other owners or operators of covered assets could receive training, cyber threat information, and notice if an asset is identified as high-risk. The bill does not specify direct changes for patients.
The bill authorizes no additional funds. It does not state the costs of carrying out its requirements.
No publicly available information.
No publicly available information.