The Rural Hospital Cybersecurity Enhancement Act would require the Department of Health and Human Services to develop workforce strategies and training resources for rural facilities.
Bipartisan legislation introduced in both the House and Senate aims to bolster the cybersecurity defenses of rural hospitals by addressing workforce shortages and training needs.
The Rural Hospital Cybersecurity Enhancement Act, introduced by Rep Erin Houchin (R-IN-09) and Rep Kim Schrier, MD, (D-WA-08), directs the Department of Health and Human Services to create a strategy for the rural hospital cybersecurity workforce. The bill also requires the department to provide instructional materials to help rural facilities train staff on basic security practices.
“Rural hospitals are often operating with limited staff and resources, yet they’re expected to defend against increasingly sophisticated cyberattacks,” says Houchin in a release. “When a rural hospital is forced offline, patient care is put at risk. This bipartisan bill is a practical step toward giving rural providers the workforce, training, and tools they need to strengthen their cybersecurity and continue serving their communities.”
Addressing Resource Gaps
Rural facilities often lack the funding to recruit and retain dedicated cybersecurity professionals, making them vulnerable to attacks that can compromise medical records, patient care, and critical infrastructure, the representatives note in a release.
“Rural hospitals in particular often lack the funding and workforce necessary to prevent cyberattacks and some in Washington have already been impacted,” says Schrier in a release. “This bill will give rural hospitals the tools they need to keep patients safe, protect personal data, and secure medical systems.”
The legislation requires the Department of Health and Human Services to develop a “comprehensive” workforce development strategy that considers public-private partnerships, cybersecurity curricula, and policy recommendations. Additionally, the department must provide annual updates to Congress on the implementation of the strategy and related workforce initiatives.
Industry Support and Legislative Path
The bill has received endorsements from several industry organizations, including the American Hospital Association, the National Rural Health Association, the Alliance for Quality Medical Device Servicing, and TRIMEDX.
“Already challenged by increasing cost pressures, we have seen first-hand how vulnerable rural hospitals are to cybersecurity attacks and we support any efforts for the development of strategies to address cyber challenges,” says Kristi McDermott, TRIMEDX chief operating officer, in a release.
The Senate companion legislation, sponsored by Senators Josh Hawley (R-MO), Maggie Hassan (D-NH), and Mark Kelly (D-AZ), has twice advanced out of the Senate Committee on Health, Education, Labor, and Pensions.
Other cosponsors of the House bill include Representatives Jefferson Shreve (R-IN), Glenn Thompson (R-PA), Jill Tokuda (D-HI), and Jennifer McClellan (D-VA).
“For rural hospitals, a cyberattack isn’t just a disruption to technology, it can become a disruption to care,” says Tokuda in a release. “This legislation helps ensure rural providers can continue delivering lifesaving care by having the resources, training, and workforce support they need to protect patient data, respond to threats, and continue serving their communities.”
ID 267733180 © Yuri Arcurs | Dreamstime.com
