V1I4P8

Cyber Resilience in the U.S. Public Health Sector Post-COVID-19

Taiwo Justice Olorunlana^1*

Abstract

While the disease outbreaks associated with COVID-19 rapidly evolved into healthcare delivery transformation in the United States, they afforded digital innovations—especially telehealth, EHRs, cloud-based platforms, and remote patient monitoring—their moment in the sun. While these innovations offered access and efficiencies, they also rendered systems vulnerable to new cybersecurity threats. Cyber resilience, the ability to anticipate, withstand, respond to, and recover from cyber threats, is now an essential factor for ensuring the secure functioning of humanitarian systems in the post-COVID-19 world.  Cybercriminals find healthcare systems attractive due to the sensitivity of patient data, life-critical services, and underfunded IT infrastructure. According to the Cybersecurity and Infrastructure Security Agency, ransomware attacks during the pandemic were heavily targeted toward healthcare providers, thereby endangering patient safety and institutional trust. Organizations have present implemented frameworks like the NIST Cybersecurity Framework, Zero Trust Architecture, and Business Continuity Planning. The U.S. Department of Health and Human Services is in a partnership with the 405(d) Task Group and Health Industry Cybersecurity Practices and is supported by CMS, OCR, and CISA to promote cybersecurity initiatives after the pandemic. Impediments to resilience are still in action with persistent limitations—challenged legacy systems, a fragmented governance system, little money for investing, and a shortage of workforce. This article will look at these challenges and pose strategic recommendations. As the digital transformation continues, maintaining cyber resilience is crucial for public health and national security, as well as fostering public trust.

Keywords: Cyber resilience; U.S. public health; COVID-19; telehealth security; ransomware; EHR cybersecurity; NIST Cybersecurity Framework; Zero Trust Architecture; healthcare data protection; healthcare policy; HHS 405(d); cyber threats; healthcare infrastructure; HIPAA compliance