HHS 405(d) Program Transitions to the Administration for Strategic Preparedness and Response (ASPR)

Today, the U.S. Department of Health and Human Services (HHS) is transitioning the 405(d) Program, a public-private effort between the health sector and the federal government on cybersecurity, from the Assistant Secretary for Administration to the Administration for Strategic Preparedness and Response (ASPR) as part of HHS’ broader Cybersecurity Strategy for the Healthcare and Public Health (HPH) Sector. This strategic move aims to create a centralized "one-stop shop" for cyber coordination, enhance partnerships with the Healthcare and Public Health (HPH) sector, expand access to government support and services, and bolster ASPR’s incident response capabilities.  

“The healthcare and public health sector is one of the country’s top targets for cyber-attacks. Bringing the 405(d) program into ASPR will allow us to better support the sector as they work to develop a robust cybersecurity capacity,” said HHS Assistant Secretary for Preparedness and Response Dawn O’Connell.

​​As the HHS division that coordinates HHS’ role as the Sector Risk Management Agency (SRMA) for the HPH Sector, ASPR is well positioned to advance the success of the 405(d) mission by enhancing cyber efforts across HHS, unifying stakeholder communications, and improving efficiency, all while continuing to address the growing cybersecurity threats facing the sector. HPH Sector partners can continue to expect the effective and well-informed HHS cybersecurity awareness products and robust private sector collaboration of the 405(d) program. To learn more about HHS cybersecurity efforts for the HPH Sector, access the new HHS Cyber Gateway at  www.hphcyber.hhs.gov. 

###