Healthcare organizations in the US may soon be overhauling cybersecurity

Some of the new requirements announced by the US Department of Health and Human Services’ (HHS) Office for Civil Rights (HHS) could bring healthcare organizations into line with current cybersecurity practices. The thoughtsfiled in the Federal Register on Friday, it includes requirements for multifactor authentication, data encryption and routine scans for breaches and breaches. It will also enable the use of anti-malware protection on systems that collect sensitive information, as well as network segments, the implementation of data storage and retrieval controls, and annual audits to ensure compliance.

HHS also shared a real paper explaining the proposal, which would amend the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. A 60-day public comment period is expected to open soon. In a press release, the US deputy national security adviser for cyber and emerging technologies, Anne Neuberger, said the system will cost $9 billion in the first year to be delivered, and $6 billion over the next four years. Reuters reports. The decision comes as a result of a significant increase in serious violations over the past few years. This year, the healthcare industry has been hit by a number of cyberattacks, including tools from Ascension and UnitedHealth that caused chaos in hospitals, doctors’ offices and pharmacies.

According to Office of Human Rights. “In 2023, more than 167 million people will be affected by major faults – a new record.”