American Hospital Assn. seeks reporting process changes to address burden on stakeholders under CISA proposed rule

The American Hospital Association offers several changes to the Cybersecurity and Infrastructure Security Agency’s proposed rule for incident reporting to simplify requirements and address “compliance and operational burdens” on stakeholders for reporting.

“America’s hospitals are keenly aware of the escalating frequency and severity of cyberattacks against hospitals and health systems and recognize the need for incident reporting as part of a broader effort to understand the nature of these attacks. Analyzing cyber incidents and tracking ransomware payments is important to...