3-Part Training Series – 10 Enhanced Healthcare Cybersecurity Performance Goals
Strengthen cyber resilience. Protect patient care. Prepare your organization.
The U.S. Department of Health and Human Services (HHS) has published 10 Enhanced Cybersecurity Performance Goals for the Healthcare and Public Health (HPH) Sector, built from CISA’s cross-sector Cybersecurity Performance Goals framework. For more information on the enhanced performance goals please visit HHS Cybersecurity webpage.
The 10 Enhanced Cybersecurity Goals for Healthcare
- Asset Inventory: Maintain a comprehensive and up-to-date accounting of all connected hardware, software, and medical devices.
- Third-Party Vulnerability Disclosure: Establish clear communication channels and processes for external vendors to report security weaknesses.
- Third-Party Incident Reporting: Require timely notification and coordinated protocols when a supplier or partner suffers a breach.
- Cybersecurity Testing: Conduct regular penetration testing, security assessments, and attack simulations.
- Mitigation of Identified Vulnerabilities: Rapidly remediate and patch security holes discovered during testing.
- Threat and TTP Detection: Actively monitor for and analyze relevant tactics, techniques, and procedures used by active threat actors.
- Network Segmentation: Isolate clinical networks, medical equipment, and critical databases to prevent lateral movement by attackers.
- Centralized Log Collection: Aggregate system and network logs into a single repository for efficient analysis and threat hunting.
- Advanced Incident Planning: Build and routinely exercise a comprehensive response and recovery plan tailored to clinical downtime.
- Configuration Management: Define and continuously enforce secure baseline settings for all enterprise devices and software.
Knowledge Today. A More Resilient Tomorrow
Session 1: November 12, 2026 @ 1:00 PM
Session 2: December 9, 2026 @ 1:00 PM
Session 3: January 14, 2027 @ 1:00 PM