Purpose

Health Care and Public Health Sector Cybersecurity Framework Implementation Guide

The HSCC JCWG developed this document in consultation with the SCC and GCC to help Health Care and Public Health sector organizations understand and leverage the NIST Cybersecurity Framework's Informative References in their implementation of sound cybersecurity and cyber risk management programs, address the five Core Function areas of the NIST Cybersecurity Framework to ensure alignment with national standards, help organizations assess and improve their level of cyber resiliency, and provide suggestions on how to link cybersecurity with their overall information security and privacy risk management activities.

The guidance will also help an organization's leadership to:

• Understand NIST Cybersecurity Framework terminology, concepts, and benefits,
• Assess their current and targeted cybersecurity posture,
• Identify gaps in their current programs and workforce,
• Identify current practices that help address recommended NIST Cybersecurity Framework outcomes.