Public-Private Partnership to Offer Free Monthly Health Care Cyber Threat Briefings

HITRUST, a health industry consortium that created the Common Security Framework of best practices, is working with the Department of Health and Human Services to conduct free monthly cyber threat briefings to stakeholders.


HITRUST, a health industry consortium that created the Common Security Framework of best practices, is working with the Department of Health and Human Services to conduct free monthly cyber threat briefings to stakeholders.

Among its initiatives, HITRUST operates the Cyber Threat Intelligence and Incident Coordination Center (C3) that identifies real- and high-probability cyber threats targeting the health care industry. The center obtains information on its own and from other security sources. The Center issues a “C3 Alert” when incidents that could be considered as imminent threats are detected.

HITRUST will conduct online cyber threat briefings in partnership with the HHS Computer Security Incident Response Center. The organizations will provide actionable information on recent, ongoing and prospective threats and events, as well as lessons learned.

The monthly threat briefings for all stakeholders will start in April and last 60 to 75 minutes, with additional materials being made available to those who register for a briefing. The monthly briefings will not replace the C3 Alerts which will continue to go out as warranted. The briefings will aid any health organization regardless of size by sharing threat intelligence and best practices, says Aaron Miri, chief technology officer at Children’s Medical Center of Dallas. He is among stakeholders who share threat information with HITRUST C3.

For more information on the briefings and to register, click here.

The new briefings complement a recently announced HITRUST initiative under which 12 industry stakeholders-hospitals, physician practices, insurers and pharmacy firms will conduct mock cyber-attack exercises. The attacks, conducted by a third party, will be real but harmless. They will be analyzed to assess how organizations recognize an attack and respond to it. The program was expected to start in March but now the first attacks will occur in April, although organizations won’t know when. HITRUST is seeking more organizations to test later this year.

More for you

Loading data for hdm_tax_topic #reducing-cost...