Healthcare Cybersecurity Act of 2024

The Healthcare Cybersecurity Act of 2024 requires the Cybersecurity and Infrastructure Security Agency (CISA) to coordinate with the Department of Health and Human Services to improve cybersecurity protections for healthcare facilities, medical devices, and patient data. Key provisions include appointing a dedicated CISA liaison within HHS to facilitate technical assistance and threat information sharing, as well as providing training to healthcare operators on risk mitigation strategies. The bill mandates that HHS update its sector-specific plan to address workforce shortages and vulnerabilities in rural or small facilities, while also establishing objective criteria to identify and prioritize high-risk assets for targeted resource allocation.