ASPR Launches Cybersecurity Module Within RISC 2.0 Platform

The Department of Health and Human Services’ (HHS) Administration for Strategic Preparedness and Response (ASPR) announced a new cybersecurity module within the Risk Identification and Site Criticality (RISC) 2.0 Toolkit. The module is intended to assist health care and public health partners in preventing disruptions to patient care and strengthening national health security as cyber threats grow more sophisticated. RISC 2.0 is a free, web-based platform that enables organizations to conduct risk assessments by identifying threats, assessing vulnerabilities, determining consequences and criticality, and sharing findings with stakeholders. The platform is currently used by more than 3,500 health systems (including those within CHSCPR!). The new cybersecurity module guides users through questions about their policies and practices and scores responses against the NIST Cybersecurity Framework 2.0 and HHS Cybersecurity Performance Goals. This standards-based approach helps organizations identify gaps, prioritize investments, and make informed decisions about risk mitigation. The module allows facilities, health systems, and coalitions to analyze cyber risk alongside other hazards within a single tool, either independently or in combination with other assessments. For additional information, refer to the ASPR RISC Toolkit 2.0 webpage.