The Healthcare and Public Health Sector Coordinating Council’s Cybersecurity Working Group testified to the House Energy and Commerce Subcommittee on Health about sector progress in adopting strong cybersecurity practices.
Greg Garcia, HSCC executive director, endorsed two pending bills—the ‘Healthcare Cybersecurity and Resiliency Act’ and the ‘Rural Hospital Cybersecurity Enhancement Act,’ while offering refinement suggestions.
These bills provide complementary guidance on structured coordination processes and objectives across HHS, CISA, and the healthcare sector, and targeted assistance to rural and resource-constrained health providers.
Garcia referenced HSCC’s 2025 report ‘On the Edge: Cybersecurity Health of America’s Resource-Constrained Health Providers’ as validation of the bill’s findings and provisions.
Finally, the NICE Framework’s Work Roles and Job Descriptions should be mapped to HHS-HSCC Health Industry Cybersecurity Practices to create clarity and uniformity in matching skills with healthcare cybersecurity job requirements.