About HCAB
HCAB is a non-governmental agency that is dedicated to enhancing and safeguarding the integrity, confidentiality, and availability of healthcare information systems. Our mission is to establish and uphold rigorous cybersecurity standards, promote continuous improvement through education and awareness, and ensure that healthcare organizations are equipped to protect patient data against evolving cyber threats.
As the official accreditation body of the Healthcare Cybersecurity Maturity Model Certification (HCMMC) Ecosystem, HCAB plays a pivotal role in maintaining cybersecurity excellence within the healthcare sector. We collaborate with industry leaders and stakeholders to develop comprehensive training, certification, and assessment protocols for healthcare cybersecurity professionals.
Founded as a nonprofit, 501(c)(3) tax-exempt organization, HCAB exists to further the successful implementation of HCMMC within the healthcare industry, aiming to reduce digital risk to healthcare systems and infrastructure. Our primary mission includes authorizing and accrediting HCMMC Third-Party Assessment Organizations (H3PAOs) that conduct HCMMC assessments of healthcare organizations. Additionally, we manage the professional certification and training aspects of the HCMMC Ecosystem.
HCAB will work closely with the U.S. Department of Health and Human Services (HHS) Healthcare and Public Health Sector Coordinating Council (HSCC) Cybersecurity Working Group (CWG). This collaboration is crucial for aligning our accreditation standards and practices with national healthcare cybersecurity initiatives. By partnering with HSCC CWG, HCAB ensures that our cybersecurity frameworks and guidelines are in sync with the latest industry regulations and best practices.
Together with HSCC CWG, HCAB is committed to:
Developing and disseminating best practices for cybersecurity in the healthcare sector.
Facilitating information sharing among healthcare organizations to enhance collective security posture.
Conducting joint workshops and training programs to educate healthcare professionals about emerging cyber threats and mitigation strategies.
Advocating for policy changes and regulatory updates that strengthen the cybersecurity infrastructure of the healthcare industry.
