The Healthcare Information and Management Systems Society maintains that while the National Institute for Standards and Technology’s Cybersecurity Framework will function as an asset to the health care industry, there’s still room for improvement, the agency said via public comment. “The Framework could be more useful to healthcare stakeholders by providing metrics and other tools to measure progress with the Framework,” as well as more specifically addressing areas of privacy, HIMSS said in a HealthITSecurity report. Elaborating “about the intersection between privacy risk management and information security risk management” would serve as one concrete Framework upgrade, the agency added.
Full Story