In the Cybersecurity Act of 2015, Congress created the Health Care Industry Cybersecurity Task Force.
6 “critical” recommendations were offered:
-
Define and streamline leadership, governance, and expectations for health care industry cybersecurity.
-
Increase the security and resilience of medical devices and health IT.
-
Develop the health care workforce capacity necessary to prioritize and ensure cybersecurity awareness and technical capabilities.
-
Increase health care industry readiness through improved cybersecurity awareness and education.
-
Identify mechanisms to protect research and development efforts and intellectual property from attacks or exposure.
-
Improve information sharing of industry threats, weaknesses, and mitigations.