Today’s modern threat landscape is constantly evolving. Determined, opportunistic, and well-resourced threat actors continue to develop tools, tactics and techniques aimed at gaining access to systems, stealing data, and/or installing ransomware.

Thoughtful selection, implementation, management, and monitoring of technical controls is required for ongoing risk management hygiene.

This new law requires the U.S. Department of Health and Human Services (HHS) to consider a healthcare entity’s adoption of cybersecurity best practices when determining the length and outcome of audits or the amount of fines or extent of penalties it will impose.