Bill > HR3841

This bill aims to enhance cybersecurity in the Healthcare and Public Health Sector by establishing a comprehensive framework for addressing increasing cyber threats. The bill requires the Cybersecurity and Infrastructure Security Agency (CISA) to coordinate closely with the Department of Health and Human Services, including appointing a dedicated cybersecurity liaison who will facilitate information sharing, support implementation of a sector-specific risk management plan, and help coordinate responses to cybersecurity incidents. The legislation acknowledges the growing cybersecurity challenges in healthcare, citing a 93 percent increase in large cyber breaches between 2018 and 2022, and over 42 million individuals affected by health information breaches in 2022 alone. Key provisions include developing training for healthcare asset owners and operators, creating a detailed risk management plan that analyzes cybersecurity challenges, identifying high-risk healthcare assets, and mandating reports to Congress about cybersecurity support and resources. The bill also includes important protections, ensuring that nothing in the act can be used to violate constitutional rights or authorize unauthorized actions, and notably requires no additional funding for its implementation. The overall goal is to improve the healthcare sector's ability to prevent, detect, and respond to cybersecurity threats that could potentially compromise patient data and healthcare delivery.

Military Affairs and Security

https://www.congress.gov/bill/119th-congress/house-bill/3841/all-info