Excerpt from article:
Health-ISAC is currently working on its official feedback for the policy options, particularly around the incentive program and efforts to get more providers on board with sharing information, explained Weiss.
Overall, any government initiative should at least have a mindful approach for those lesser resourced organizations.
For example, with ransomware, several entities, including Health-ISAC, have generated great ransomware recommendations centered on the types of firewalls and staff training. But some of these efforts overlook the capabilities of smaller entities, like a two-person office, said Weiss. Those entities should focus on awareness: what to look for in these attacks and back-ups.
The federal government has set its sights on improving healthcare’s cybersecurity posture through collaborative partnerships. However, stakeholders are frustrated, some even angry, that their proposals appear to recycle past work rather than building on the foundation these leaders have spent their careers making.