HHS updates a free risk tool to help hospitals size up their cybersecurity exposure

The Department of Health and Human Services' ASPR has added a cybersecurity module to the free RISC 2.0 toolkit to help healthcare and public health organizations identify cyber threats, assess vulnerabilities, and measure consequences against NIST CSF 2.0 and HHS performance goals. The change—motivated in part by the Change Healthcare attack—aims to place cyber risk alongside other hazards (like weather or power failures) so executives and boards can better prioritize investments and improve resilience; it does not report any specific incident or technical indicators.