Part B News: Jade Davis on New NIST Cybersecurity Framework & Insurance Impact

In an article published on April 10, 2023, in Part B News, Tampa Of Counsel Jade Davis shares her insight and expertise on the Health Care and Public Health Sector Cybersecurity Framework Implementation Guide 2.0, from HHS’ Administration for Strategic Preparedness (ASPR), its impact on the industry, and how compliance could impact cybersecurity insurance.

Davis believes it would be beneficial to develop consistent ways to prove compliance with the framework, saying the report promises “measure­ment tools developed and made available by National Institute of Standards and Technology (NIST) for the generation of metrics, measures, and performance reports facilitating performance improvements in their informa­tion security programs and the HPH sector”, but they won’t be available until winter 2024.

For insurance, Jade believes there could be incentives for compliance with the framework which could bring down costs. However, she doesn’t believe that will happen in the short term because “carrier premium changes are premised on monies paid out” and those costs are continuing to increase dramatically.

Subscribers can read the full article on the Part B News website.