Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

HHS updates a free risk tool to help hospitals size up their cybersecurity exposure

Дата публикации: 05-03-2026 19:20:37

HHS has updated its free RISC 2.0 toolkit with a new cybersecurity module, asking hospitals to assess digital threats alongside hurricanes, power failures and other hazards.
The post HHS updates a free risk tool to help hospitals size up their cybersecurity exposure appeared first on CyberScoop.


Основное содержимое страницы с новостью.

The Department of Health and Human Services unveiled a tool Thursday to help health care facilities assess their cybersecurity risks, elevating the emphasis on those threats to the kind produced by weather conditions and other dangers.

The assistance from HHS’s Administration for Strategic Preparedness and Response (ASPR) comes in the form of an update to the Risk Identification and Site Criticality (RISC) 2.0 Toolkit to include a specific focus on cybersecurity. 

RISC is a free tool to help organizations identify threats and vulnerabilities, estimate consequences and share their findings with others. Now it will include a cybersecurity module, too.

The module walks users through a series of questions and measures them against the influential National Institute for Standards and Technology Cybersecurity Framework 2.0, as well as HHS’s own voluntary cybersecurity performance goals.

John Knox, principal deputy assistant secretary at ASPR, said the change was a response to growing cyber threats.

“This module is the latest addition to our toolkit of resources to assist our health care and public health partners in preventing the disruption of patient care and strengthening national health security,” Knox said in a news release. “We must acknowledge that cyber safety is patient safety and that cyber threats can cause cascading problems across the health care industry. The new cybersecurity module will help our partners understand what is needed to strengthen their resilience and we strongly encourage them to take advantage of it.”

It continues an emphasis ASPR’s Charlee Hess discussed at CyberTalks last month, with the landmark Change Healthcare attack prompting the HHS division to look at ways to help organizations manage risk from third-party providers.

Errol Weiss, chief security officer at the Health Information Sharing and Analysis Center, said the creation of the cyber module was a “smart move,” with the RISC toolkit already being integrated into thousands of health care systems. He also liked the toolkit leaning on the NIST framework and HHS’s performance goals.

“By putting cyber side‑by‑side with other threats and hazards in a unified platform, RISC 2.0 can help hospital and health system leaders see cyber exposure in the same context as hurricanes, active shooters, or power failures,” he said in an emailed response to CyberScoop. “That visibility can drive more informed conversations at the executive and board levels about where to invest in cybersecurity, what gaps are most critical, and how cyber disruptions might cascade into real impacts on patient care.”

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1HHS burrows into identifying risks to health sector from third-party vendors09.119-02-2026
2Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks06.4921-04-2026
3Senate moves one step closer to passing health care cyber reforms 07.0126-02-2026
4CISA issues recommendations to federal agencies on open-source software security012.4130-07-2026
5NIST wants to overhaul its vulnerability database for the AI age09.1711-08-2026
6AI’s ‘middle class’ has gotten dramatically better at hacking09.9913-08-2026
7A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.06.7213-08-2026
8235 GB of PHI and internal documents dumped; Chaos claims it comes from Healthcare Highways014.5917-08-2026
9AI-assisted security tools are finding more bugs, but the threat level has not changed09.9728-07-2026
10Rubrik Public Sector Summit: Building Resilience for the AI Era07.0320-07-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 7.05. Источник: www.cyberscoop.com.