Ignore Uncle Sam's 'voluntary' cybersecurity goals for hospitals at your peril

An interview with a Google Cloud OCSO leader argues that HHS’s voluntary cybersecurity performance goals for healthcare will likely become mandatory, urging hospitals to adopt essential controls like MFA, email security, deprovisioning, and vendor risk assessments despite operational and legacy-technology challenges. Framed by recent ransomware disruptions to U.S. hospitals, the piece stresses that availability and recovery must be prioritized alongside data confidentiality, especially for resource-constrained and rural providers.