Healthcare and Public Health Sector: Know the Risks, Use Cyber Hygiene
Cybersecurity is not one size fits all. Different healthcare entities have distinct strengths and weaknesses and a wide range of needs. Regardless of where an organization fits into the picture, these resources can help build a cyber-secure foundation.
Hospital Cyber Resiliency Landscape Analysis
This joint product developed by HHS and industry includes a deeper investigative study into the methods that cyber adversaries are using to compromise US hospitals, disrupt operations, and extort for financial gain.
HPH Sector Cybersecurity Framework Implementation Guide, Version 2
This product was developed jointly by HHS and the HSCC Cybersecurity Working Group, in consultation with the Sector Coordinating Council and Government Coordinating Council to help HPH sector organizations.
Health Industry Cybersecurity Practices (HICP): Managing Threat and Protecting Patients
This product developed jointly by HHS and the HSCC Cybersecurity Working Group outlines the top threats facing the HPH sector and provides recommendations and best practices to prepare and fight against cybersecurity threats.
Healthcare and Public Health Sector Risk Identification and Site Criticality (RISC) Toolkit
The RISC Toolkit is an objective, data-driven, all-hazards risk assessment that can be used by public and private organizations within the HPH Sector to inform emergency preparedness planning, risk management activities, and resource investments.
Security Risk Assessment (SRA) Tool
HHS ONC and OCR developed this risk assessment tool designed to assist small and medium-sized organizations operating in the health care sector to identify and assess security risks within their organization.
Cyber Hygiene Services
Reduce the risk of a successful cyberattack with vulnerability scanning. CISA’s Cyber Hygiene Services help secure internet-facing systems from weak configurations and known vulnerabilities and encourages the adoption of best practices.
Known Exploited Vulnerabilities Catalog
This catalog is the authoritative source of cyber vulnerabilities that have been exploited in the wild. By prioritizing known exploited vulnerabilities, healthcare organizations can significantly reduce their likelihood of compromise.
Secure Our World
CISA has just launched Secure Our World, a new cybersecurity awareness program aimed at educating individuals and businesses on four easy ways to stay safe online.