Censinet debuts HHS CPG toolkit for AHA members to boost implementation, compliance

By July 24, 2024 September 17th, 2024 News

Healthcare risk management solutions firm Censinet has announced the delivery of a free toolkit of Censinet RiskOps assessment, benchmarking, monitoring, and reporting capabilities (Censinet CPG Toolkit) to help American Hospital Association (AHA) members improve coverage and compliance with the recently-announced U.S. HHS Healthcare and Public Health Sector Cybersecurity Performance Goals (HHS CPGs). Delivered in partnership with AHA and AHA Preferred Cybersecurity Provider (APCP) organizations, the Censinet CPG Toolkit provides comprehensive capabilities needed to assess, implement, and comply with 10 ‘Essential’ and 10 ‘Enhanced’ HHS CPGs.

“We’re honored to serve alongside the AHA, APCP organizations, Google, and Microsoft to deliver vital HHS CPG resources to AHA members,” said Ed Gaudet, CEO and founder of Censinet. “With federal incentives likely falling short of adequate, many hospitals will need help to ‘fill the gap’, and Censinet is proud to offer them critical resources at no cost to comply with these new regulations and avoid penalties.”

The Censinet CPG Toolkit includes a host of resources and capabilities to help drive compliance with HHS CPGs.

In case of assessments, the company said that annual enterprise assessments and reporting for HHS CPGs and recognized security practices include HHS CPGs, NIST Cybersecurity Framework (CSF); and 405(d) Health Industry Cybersecurity Practices (HICP).

AHA members can leverage NIST CSF and/or HICP enterprise assessments to automatically map their current coverage of the HHS CPGs.

Peer benchmarking to prioritize resource allocation and help justify investment, including participation in the Healthcare Cybersecurity Benchmarking Study initiative; comparison to industry aggregate benchmarks with benchmarking dashboards; annual performance trending, basic peer group filters, board-level reporting; and access to the annual Summary Report re: current findings from the study.

‍Full reporting capabilities to demonstrate end-to-end organizational compliance with all 10 Essential and 10 Enhanced HHS CPGs.

“The American Hospital Association is delighted to have Censinet serve with us and support our members with implementing the HHS CPGs,” said John Riggi, National Advisor for Cybersecurity and Risk, American Hospital Association. “This collective effort by AHA and our Preferred Cybersecurity Providers is a shining example of how public and private organizations can come together to help provide critical support to those hospitals and health systems most in need.”

For AHA members who sign up for the free Censinet CPG Toolkit, Censinet is also offering the 30 percent off Censinet Risk Ops platform license for Third-party Risk Management (TPRM) and 20 percent off Censinet Risk Ops Managed Services (MSP).

“The HHS CPGs will significantly strengthen the health sector’s cyber preparedness as attacks continue to intensify in frequency and malice,” said Greg Garcia, Executive Director, Health Sector Coordinating Council Cybersecurity Working Group.“ Mapped to NIST CSF and HICP to ease adoption, all healthcare organizations will benefit from implementing the best practices and controls contained in the CPGs as they will drive both immediate and long-term impact on their cybersecurity maturity and resiliency.”

The partners and AHA Preferred Cybersecurity Providers participating in this CPG support program for AHA members include Microsoft, Google, Aon, Censinet, Critical Insight, and Cylera.