Health systems oppose new cybersecurity rules

Health systems oppose new cybersecurity rules 
Becker's Health IT; by Giles Bruce; 7/8/24 
Health systems and industry trade groups are objecting to new cybersecurity reporting requirements proposed by the Cybersecurity and Infrastructure Security Agency. The recommended rule under the Cyber Incident Reporting for Critical Infrastructure Act of 2022 would, among other things, require covered entities to report cyberattacks within 72 hours and ransom payments within 24 hours. The proposal, which is estimated to cost the industry $1.4 billion, would exempt small and critical access hospitals.