Senators Reintroduce Health Infrastructure Security Act to Mandate Healthcare Cybersecurity Standards
Senators Mark Warner and Ron Wyden have reintroduced the Health Infrastructure Security and Accountability Act, a legislative proposal aimed at establishing and enforcing minimum cybersecurity standards across the American healthcare system. This bill targets healthcare providers, health plans, clearinghouses, and business associates, requiring them to undertake several critical security measures. These include conducting security risk analyses, developing comprehensive incident response plans for cyber incidents, natural disasters, and technology failures, performing stress tests to evaluate their ability to restore essential functions, and undergoing independent security audits. The legislation also proposes significant financial investment, with $800 million in upfront payments over two years designated for 2,000 rural and urban safety-net hospitals. This funding is intended to help these hospitals adopt essential cybersecurity standards to address high-risk vulnerabilities in their data infrastructure ...
