The Healthcare and Public Health Sector Coordinating Council (HSCC) today released a consensus-based guide to developing, deploying and supporting cyber-secure medical devices and health information technology across the product lifecycle and improving information sharing between manufacturers and health care organizations. A public-private partnership of health care companies and providers developing collaborative solutions to mitigate threats to critical health care infrastructure, HSCC developed the Medical Device and Health IT Joint Security  in response to 2017 recommendations by the Health Care Industry Cybersecurity Task Force. 鈥淭he goal of this effort was to align cybersecurity priorities and processes between medical device manufactures and health care providers to lower the cybersecurity risk in medical devices,鈥  Kevin McDonald, co-chair of the initiative and director of clinical information security at Mayo Clinic. 鈥淏y creating this alignment we can strengthen the security of medical technology against cyber threats, improve cyber risk management within health care organizations, and better protect patient safety.鈥 Feedback on the plan, which will be updated as needed to adapt to the changing threat environment, may be emailed to JSPFeedback@HealthSectorCouncil.org. 

Related News Articles

Headline
The Cybersecurity and Infrastructure Security Agency April 17 released guidance to reduce risks associated with a reported breach of Oracle cloud services.鈥
Headline
The National Counterintelligence and Security Center, the FBI, and the Defense Counterintelligence and Security Center yesterday released guidance on鈥
AHA Cyber Intel
While the rate of cyberattacks on hospitals has risen dramatically, the severity of the impacts has also grown exponentially. Let鈥檚 look at the state of cyber鈥
Headline
The House Energy and Commerce Oversight and Investigations Subcommittee April 1 discussed cybersecurity threats in legacy medical devices during a hearing. The鈥
Headline
Despite elegant efforts to design for safe use, rigorous standards and regulatory requirements, and lots of training of health care professionals, there鈥檚鈥
Headline
The Trump Administration March 28 announced that it renewed for one year the public emergency for ongoing malicious cyber-enabled activities against the U.S.鈥