The Health Information Sharing and Analysis Center (Health-ISAC) and the Healthcare and Public Health Sector Coordinating Council (HSCC) Cybersecurity Working Group appreciate the opportunity to submit comments related to the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA).
Health-ISAC is a trusted community of critical infrastructure owners and operators within the Healthcare and Public Health (HPH) sector. The community is primarily focused on sharing timely, actionable, and relevant information including intelligence on threats, incidents and vulnerabilities that can include data such as indicators of compromise, tactics, techniques, and procedures (TTPs) of threat actors, advice and best practices, mitigation strategies and other valuable material. Sharing can occur via machine to machine or human to human. Health- ISAC also fosters the building of relationships and networking through a number of educational events in order to facilitate trust. Working groups and committees focus on topics and activities of importance to the sector. Shared Services offer enhanced services for the Health-ISAC community to leverage for the benefit of all.