The Department of Health and Human Services and the Office for Civil Rights have announced they will be soliciting comments on a proposal to modify the Security Standards for the Protection of ...

The HHS Office for Civil Rights proposed a rule on Jan. 6 to update the HIPAA Security Rule, potentially affecting health systems’ security policies and operations. A Feb. 3 blog post by Coronis ...

In this week’s installment of our blog series on the U.S. Department of Health and Human Services’ (HHS) HIPAA Security Rule updates in its January 6 Notice of Proposed Rulemaking (NPRM), we discuss ...

The US Department of Health and Human Services (HHS) on January 6, 2025 issued a notice of proposed rulemaking (NPRM) seeking feedback on proposed updates to the Security Standards for the Protection ...

The Department of Health and Human Services (HHS) proposed a rule days before the new year began that would hold healthcare organizations to a higher standard for protecting sensitive healthcare ...

In its annual audit required by the Federal Information Security Modernization Act of 2014, OIG said it reviewed HHS programs and practices against its core and supplemental metrics. Through the ...

The HHS wants to update the HIPAA security rule for the first time in more than a decade to bolster healthcare cybersecurity, regulators said late last month. The Office for Civil Rights, which ...

The HHS has faced challenges mitigating cybersecurity risks in the healthcare sector, according to a report published Thursday by the Government Accountability Office. The department hasn’t ...

The new cybersecurity module in the RISC 2.0 toolkit helps providers evaluate digital threats through the same risk-assessment framework used for other operational hazards. Federal health officials ...

The Department of Health and Human Services is making progress in improving its information security practices, but it still has gaps that put sensitive data and systems at risk of compromise, ...

A report from the Government Accountability Office suggests HHS could offer better guidance for healthcare organizations regarding cybersecurity and safeguarding patient information. The GAO report ...