UnitedHealth, Ascension Attacks Feed Debate Over Health Care Security

Ransomware attacks on UnitedHealth and Ascension highlight the need for stronger health care security measures. The White House plans to issue proposed rules to establish minimum cybersecurity standards for hospitals. The American Hospital Association argues for voluntary security practices rather than enforced standards. Health care organizations are major targets for cybercriminals due to the value of their data. Proposed solutions include implementing a HealthRAMP security framework modeled after FedRAMP.