Department coordination with the Agency

(a) In general The Secretary and the Director shall coordinate, including by entering into a cooperative agreement, as appropriate, to improve cybersecurity in the Healthcare and Public Health Sector. (b) Assistance (1) In general The Secretary shall coordinate with the Director to make resources available to entities that are receiving information shared through programs managed by the Director or the Secretary, including Information Sharing and Analysis Organizations, information sharing and analysis centers, and non-Federal entities. (2) Scope The coordination under paragraph (1) shall include— (A) developing products specific to the needs of Healthcare and Public Health Sector entities; and (B) sharing information relating to cyber threat indicators and appropriate defensive measures.

(a) In general The Secretary and the Director shall coordinate, including by entering into a cooperative agreement, as appropriate, to improve cybersecurity in the Healthcare and Public Health Sector. (b) Assistance (1) In general The Secretary shall coordinate with the Director to make resources available to entities that are receiving information shared through programs managed by the Director or the Secretary, including Information Sharing and Analysis Organizations, sector coordinating councils, and non-Federal entities. (2) Scope The coordination under paragraph (1) shall include— (A) developing products specific to the needs of Healthcare and Public Health Sector entities; (B) sharing information relating to cyber threat indicators and appropriate defensive measures, including automating cyber threat information sharing, in a manner that adequately protects against unauthorized access or disclosure; and (C) providing technical assistance to covered entities and business associates to improve cybersecurity preparedness. (c) Joint cybersecurity planning (1) In general Not later than 1 year after the date of enactment of this Act, the Secretary and the Director shall establish a joint cybersecurity capability plan to coordinate responses to significant cybersecurity incidents affecting the Healthcare and Public Health Sector. (2) Elements The joint cybersecurity capability plan established under paragraph (1) shall include— (A) protocols for rapid information sharing during sector-wide cybersecurity incidents; (B) coordination mechanisms with the sector coordinating council for the Healthcare and Public Health Sector; and (C) coordination with Cybersecurity State Coordinators for incidents affecting multiple States. (3) Submission to Congress (A) In general Not later than 1 year after the date of enactment of this Act, the Secretary shall submit to the Committee on Health, Education, Labor, and Pensions of the Senate and the Committee on Energy and Commerce of the House of Representatives the final joint cybersecurity capability plan prepared under paragraph (1) and a description of how such plan implements the elements required under paragraph (2). (B) Updates If the Secretary and the Director update the joint cybersecurity capability plan required under this subsection, the Secretary shall submit to the Committee on Health, Education, Labor, and Pensions of the Senate and the Committee on Energy and Commerce of the House of Representatives such updated plan and a description of how such plan implements the elements required under paragraph (2).