A National Strategy for Cybersecurity

March 03, 2023

The White House this week unveiled its national cybersecurity strategy that marks a fundamental shift “in how the United States allocates roles, responsibilities, and resources in cyberspace.”

The report focuses on key pillars to defend critical infrastructure, disrupt and dismantle threat actors, improve security and resilience, and bolster international partnerships.

“Cybersecurity is essential to the basic functioning of our economy, the operation of our critical infrastructure, the strength of our democracy and democratic institutions, the privacy of our data and communications, and our national defense," the report notes.

Among the key takeaways:

• A focus on responsibility:  The strategy shifts the burden of cybersecurity to organizations that are “best-positioned to reduce risks for all of us” and away from individuals, small businesses, and local government.
• The ‘Internet of Things’:  The rise of so-called “Internet of Things” devices—such as fitness trackers, baby monitors, industrial control systems and sensors—need to improve protection against exploitation from bad actors.
• Software products, services:  Software products need room to innovate but should be held responsible if they do not "live up to the duty of care they owe consumers, businesses, or critical infrastructure providers."
• Federal protection:  The government will evaluate the need for federal insurance to protect against catastrophic cyber events.
• Quotable:  “The Strategy recognizes that government must use all tools of national power in a coordinated manner to protect our national security, public safety, and economic prosperity,” the White House noted.

Pennsylvania hospitals continue to focus on efforts to bolster their cybersecurity. For more information about health care cybersecurity, contact Jason Tomashunas, MS, CHEP, HAP manager, emergency management.

Additionally, John Riggi, the American Hospital Association's (AHA) senior advisor for cybersecurity and risk, is able to assist AHA members with expertise and resources about health care cybersecurity.

The national cybersecurity strategy is available online.