“The new guidelines are intended to help protect sensitive health data and comply with HIPAA’s security rule. The revision is more actionable so that healthcare organizations can improve their cybersecurity posture and comply with the security rule,” Jeff Marron, an NIST cybersecurity specialist, said in a July 22 press release.
NIST is seeking comments on the draft guidelines until Sept. 21.
