FOR IMMEDIATE RELEASE

CHIME Supports HHS' Release of Cybersecurity Performance Goals to Safeguard Healthcare Sector - Urges Ongoing Federal Support

WASHINGTON, DC, January 25, 2024  – On a daily basis, healthcare delivery organizations face relentless attacks from cyber criminals, often backed by well-funded hostile nation states. These attacks, which involve holding organizations hostage, stealing patient data, and extorting substantial ransoms, pose an unacceptable and perilous threat to patient safety and national security. Recognizing the severity of these incidents, it is imperative that these cybersecurity challenges are approached with the seriousness they demand. 

Yesterday the U.S. Department of Health & Human Services released twenty voluntary Cybersecurity Performance Goals (CPGs) including ten “essential” and ten “enhanced” goals that can be adopted by healthcare organizations. This marks an important milestone in helping advance the cyber posture of the healthcare sector. The CPGs were crafted following an extensive review of current threats, extensive sector feedback, and works off the most common attack vectors as detailed in the 2023 Hospital Cyber Resiliency Landscape Analysis.

CHIME supports bringing a more coordinated, standardized and focused approach to the way that the Healthcare and Public Health (HPH) Sector approaches cybersecurity. This proactive step by HHS underscores the collective responsibility to ensure the resilience of our sector. We believe this is a reasonable approach that can help providers improve their cybersecurity posture and resilience. However, we are cognizant that implementing these measures will take time and resources, especially for under-resourced and safety-net providers. CHIME will continue to advocate strongly for the need for financial support to ensure that no one is left behind. 

In the ongoing battle against cyber threats, we emphasize the need for a united and concerted front, recognizing that cybersecurity is a shared responsibility. CHIME has been actively engaged in the Health Sector Coordinating Council’s Cybersecurity Working Group (HSCC CWG). Through the dedication of our members and foundation firm partners, thousands of hours have been volunteered to collaborate with federal counterparts, collectively enhancing the cybersecurity posture of our sector and assisting providers in navigating the evolving cyber landscape. 

Together, we will continue to strengthen the resilience of our healthcare community against cybersecurity threats and improve patient safety.

###

Contact

Calli Dretke

Executive Vice President & Chief Digital and Marketing Officer

CHIME                                                                                                          

1. 412.6255

[email protected]

Mari Savickis                                                                        

Vice President, Public Policy

CHIME                                                                                                          

1. 294.3828

[email protected]