07/06/2022: HSCC Cyber Working Group Q2 2022 Report
Author: Allison Burke
05/23/2022: CHIME and WEDI Create “Think Before You Click” Campaign
CHIME and WEDI have developed the “Think Before You Click” resource to assist consumers who are looking to share their health information with third-party apps. This initiative, which includes a 5-step checklist, is designed to educate and empower consumers to take the appropriate precautions prior to the transmission of health information to third-party apps. The checklist is non-branded and is made available at no cost to any organization seeking to educate and protect their constituents. There are three versions to allow for end users to customize the resource with their logo.
05/18/2022: Denise Anderson testimony to United States Senate Committee on Health, Education, Labor, and Pensions
Denise Anderson, president and CEO of the Health Information Sharing & Analysis Center, and HSCC Cyber Working Group Executive Committee Member, testifies at U.S. Senate Health, Education, Labor and Pensions Committee.
05/13/2022: Tips to Improve Medical Device Vulnerability Communications
New Health Sector Coordinating Council guidance aims to help medical device makers improve their communications regarding security vulnerabilities in their products, says Matt Russo, a security leader at Medtronic and a member of the task group that developed the document.
04/29/2022: Health Industry Publishes “Operational Continuity-Cyber Incident (OCCI)” Checklist
Today the Health Sector Coordinating Council’s (HSCC) Cybersecurity Working Group (CWG) published the “Operational Continuity-Cyber Incident (OCCI)” checklist.
Operational Continuity – Cyber Incident (OCCI)
This Operational Continuity Cyber Incident (OCCI) checklist is intended to provide a flexible template for operational staff and executive management to respond to and recover from an extended enterprise outage due to a serious cyber-attack. Its suggested operational structures and tasks can be modified or refined according to an organization’s size, resources, complexity and capabilities.
03/03/2022: Health Industry Publishes Model Contract Language for Medical Technology Cybersecurity
Medical technology companies and health delivery organizations have a new template published March 3 for agreeing on cybersecurity contractual terms and conditions to reduce cost, complexity and time in the contracting process and improve patient safety.
Model Contract-Language for Medtech Cybersecurity (MC2)
MC2 offers a reference for shared cooperation and coordination between Healthcare Delivery Organizations (HDOs) and Medical Device Manufacturers (MDMs) regarding the security, compliance, management, operation, services, and security of MDM-managed medical devices, solutions, and connections. It is strongly encouraged that all medical device manufacturers, health delivery organizations, and group purchasing organizations closely review this contract language and adopt as much as is appropriate for your organization. The more uniformity and predictability we can achieve in cross enterprise cybersecurity management expectations the greater strides we’ll make toward patient safety and a more secure and resilient healthcare system.
Record Number of Major Health Data Breaches in 2021
In the midst of the global COVID-19 pandemic, the federal tally shows that a record number of major health data breaches were reported in the U.S. in 2021, and the overwhelming majority of them involved hacking/IT incidents.