The Cybersecurity Information Sharing Act (CISA) is a United States federal law designed to "improve cybersecurity in the United States through enhanced sharing of information about cybersecurity threats, and for other purposes". CISA was signed into law on December 18, 2015 and allows the sharing of Internet traffic information between the U.S. government and technology and manufacturing companies. The major components of the law authorizes companies to monitor and implement defensive measures on their own information systems to counter cyber threats. Second, CISA provides certain protections to encourage companies voluntarily to share information—specifically, information about “cyber threat indicators” and “defensive measures”—with the federal government, state and local governments, and other companies and private entities.
This Program will feature notable Federal Chief Information Security Officers (CISO) across the Federal Health Agencies to help our members delve deeper into the changes that will be sweeping across the agencies and how both government and industry will be affected on sharing threat and vulnerability information across the industry.
Discussion Topics Include:
- CISA 2015 – Discuss key tenants of the law and their implications to the healthcare industry
- What changes will you see across the federal Health IT agencies?
- How does the government and non-federal agencies work together through transition?
- Information sharing and how to protect sensitive and protected health information?