Skip to main content
U.S. flag
An official website of the United States government

About Us

The HHS 405(d) Program is a collaborative effort between the Health Sector Coordinating Council and the federal government to align healthcare industry security practices. Under The Administration for Strategic Preparedness and Response (ASPR), the 405(d) Program is focused on providing organizations across the nation with useful and impactful Healthcare and Public Health (HPH) focused resources, products, and tools that help educate, raise awareness, and provide vetted cybersecurity best practices which drive behavioral change and strengthen the sector’s cybersecurity posture against cyber threats.

Our History

The 405(d) Program started as a congressional mandate under the Cybersecurity Act of 2015 (CSA), Section 405(d) to strengthen the cybersecurity posture of the healthcare and public health sector. In the beginning, collaborators had one goal, to develop a document that brought forth cybersecurity awareness and provided best practices for mitigating the most pertinent cyber issues within the healthcare sector to date. As a result, the 405(d) Task Group, (with a collaborative effort of members from the U.S. Department of Health and Human Services (HHS), Health Sector Coordinating Council, and 200+ cybersecurity and healthcare experts) established the Health Industry Cybersecurity Practices (HICP): Managing Threats and Protecting Patients and its accompanying two technical volumes. Today the 405(d) Program provides organizations across the nation with resources and recommended steps to prepare for threats, offers practices to mitigate cybersecurity threats.

Our Partners

Health and Human Services
HHS Health Sector Cybersecurity Coordination Center
Assistant Secretary for Preparedness and Response
HPH Cybersecurity Gateway
StopRansomware.gov
Health Sector Coordinating Council
U.S. Food and Drug Administration
HHS Office of Civil Rights
Centers for Medicare and Medicaid Services

Task Group

The Task Group is responsible for the development of products such as HICP and other resources. The Task Group works diligently to update, revise and create official 405(d) products to provide effective and current cybersecurity practices.

Join the Task Group of professionals that oversee and develop products that are made by and for organizations with patient safety at the top of priorities.

For a full listing of our current 405(d) Task Group members as of 3/25/2024, click here

Get Involved with the 405(d) Task Group:

Task Group Application

E.g., Larry David

E.g., HHS

E.g., Anesthesiology

E.g., larry.david@hhs.gov