Cybersecurity and Privacy

HIMSS Urges Congress to Reauthorize Cybersecurity Law that Encourages Collaboration and Resilience

HIMSS has joined more than 50 leading non-profit organizations in urging Congress to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA 2015) before its sunset date of Sept. 30, 2025.

Read the letter: Coalition Letter Supporting Reauthorization of the Cybersecurity Information Sharing Act of 2015 (CISA 2015)

Enacted with bipartisan support, CISA 2015 has been instrumental in strengthening the nation’s cybersecurity defenses by promoting the voluntary sharing of cyber threat indicators between private entities and government agencies.

Importantly, it provides certain legal protections to organizations that engage in good faith information sharing, thereby encouraging proactive cybersecurity collaboration.

Section 405 of CISA 2015 focuses specifically on the healthcare sector. Subsection 405(d) establishes a collaborative, voluntary approach to developing consensus-based, industry-led cybersecurity guidelines tailored to healthcare.

The law also facilitates real-time sharing of cyber threat indicators between healthcare organizations and federal entities, strengthening coordinated responses to evolving threats through public-private collaboration and existing cybersecurity initiatives.

“The intent of the healthcare cybersecurity provision of the Cybersecurity Information Sharing Act of 2015 (6 USC 1533) was to establish a voluntary, consensus-based, industry-led approach so we can collectively strengthen our security posture and share meaningful threat intelligence within healthcare and, where appropriate, with other critical infrastructure sectors,” said Lee Kim, HIMSS senior principal, cybersecurity and privacy. “This law has had a significant impact not only on healthcare, but across other sectors by advancing collaboration and improving cyber resilience. I am happy to have contributed to the creation of this provision, which continues to strengthen cybersecurity across healthcare and beyond.”

HIMSS Public Policy and Advocacy

At HIMSS, we educate, conduct research and offer strategic public policy recommendations, driving digital health transformation to realize the full health potential of every human everywhere.

Make your voice heard

Published on