The U.S. Department of Health & Human Services and the Cybersecurity & Infrastructure Security Agency have partnered to provide information, videos, cybersecurity awareness posters and toolkits to assist organizations to improve their resilience against cyber attacks. Information is available on the Section 405(d) Program website. According to the agencies:
The 405(d) Program is focused on providing the healthcare & public health (HPH) sector with impactful resources, products, and tools to raise awareness and strengthen the sector’s cybersecurity posture against cyber threats. This action drives behavioral change and move towards consistency in mitigating the most relevant cybersecurity threats to the sector with resources like HICP (Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients) and the Hospital Resiliency Landscape Analysis.
The 405(d) website offers a number of cybersecurity resources to the health and public health (HPH) sector, including information and publications to assist in combating the top 5 threats facing the HPH sector: social engineering, ransomware, loss or theft of equipment, insider, accidental, or intentional data loss, and attacks against network connected medical devices.