Bill > S1851

This bill aims to enhance cybersecurity in the Healthcare and Public Health Sector by establishing several key provisions. The bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to coordinate with the Department of Health and Human Services to improve cybersecurity, including appointing a dedicated liaison with cybersecurity expertise who will facilitate threat information sharing, support implementation of a sector-specific risk management plan, and assist in cybersecurity training. The bill mandates the development of a comprehensive risk management plan that analyzes cybersecurity risks, evaluates challenges faced by healthcare asset owners, assesses workforce shortages, and recommends communication strategies, with a focus on rural and small-to-medium-sized healthcare entities. Additionally, the bill introduces a mechanism for identifying and prioritizing high-risk healthcare assets, requires the agency to provide cybersecurity training to owners and operators of healthcare assets, and mandates multiple reports to Congress detailing support activities, sector challenges, and available resources. The bill emphasizes protecting patient data and healthcare infrastructure from increasing cyber threats, as evidenced by data showing a significant rise in healthcare data breaches and cyberattacks between 2018 and 2022. Importantly, the bill includes provisions ensuring that its implementation does not violate constitutional rights or require additional funding.

Military Affairs and Security

https://www.congress.gov/bill/119th-congress/senate-bill/1851/all-info