Requirements ยท Healthcare

HHS 405(d) Health Industry Cybersecurity Practices

4 Moraph products list it under “Requirements it supports”. The products support this requirement; meeting it remains your organization’s responsibility.

About the rule

What it is

Health Industry Cybersecurity Practices (HICP) is a publication of the HHS 405(d) Program, which takes its name from Section 405(d) of the Cybersecurity Act of 2015, and was developed with the Healthcare and Public Health Sector Coordinating Council. It sets out voluntary cybersecurity practices for health care organizations, with technical volumes for small organizations and for medium and large ones.

Source: HHS 405(d) Program. This summary is for orientation only; read the rule itself or ask your counsel for what it requires of you.

Citations

How the products cite it

The exact wording on the product pages, with how many products use each.

  • HHS 405(d) Health Industry Cybersecurity Practices (HICP) 2 products
  • Health Industry Cybersecurity Practices (HICP), 405(d) program 1 product
  • Health Industry Cybersecurity Practices (HICP), Section 405(d) of the Cybersecurity Act of 2015 1 product

For what it requires of your organization, read the rule itself or ask your counsel.

Products

The 4 products that support it

  • HealthcareManaged platform

    Email Security

    Advanced defense against "Whaling" attacks targeting hospital CFOs and patient data phishing.

    Lists:

    • Health Industry Cybersecurity Practices (HICP), Section 405(d) of the Cybersecurity Act of 2015
    Product details and demo
  • HealthcareManaged platform

    Identity Governance

    Role-Based Access Control (RBAC) tying nurses' access to their unit and job, supporting HIPAA Minimum Necessary. Patient-level limits are enforced in the EHR; access decisions remain yours.

    Lists:

    • Health Industry Cybersecurity Practices (HICP), 405(d) program
    Product details and demo
  • HealthcareMoraph SaaS

    Medical Device Cybersecurity Hub

    Inventory of IoMT (Internet of Medical Things) devices, tracking patch status and vulnerabilities.

    Lists:

    • HHS 405(d) Health Industry Cybersecurity Practices (HICP)
    Product details and demo
  • HealthcareManaged platform

    Network Access Control

    Quarantining unknown medical devices that plug into hospital wall jacks.

    Lists:

    • HHS 405(d) Health Industry Cybersecurity Practices (HICP)
    Product details and demo

Not sure which requirements apply to you? Request a gap analysis. All requirements: Requirements our products support.

More healthcare requirements