Health Sector Coordinating Council

The Health Sector Coordinating Council (HSCC) Cybersecurity Working Group is an industry-led collaboration of more than 400 healthcare organizations focused on protecting and strengthening the health sector against cyber and physical threats. Its members include organizations across healthcare, medical technology, health IT, pharmaceuticals, health plans, and public health, working alongside government partners. The group’s mission is to identify risks to the sector’s security and resilience, develop guidance to mitigate them, and support threat preparedness and incident response.

HSCC provides practical resources rather than commercial products. Members collaboratively create and publish freely available cybersecurity best practices, policy recommendations, strategic plans, toolkits, guides, and model contract language. Its materials address areas such as risk management, incident response and recovery, medical technology security, artificial intelligence governance, and supply-chain transparency. The council also advises government, shares sector updates and research, and offers outreach, communications, training resources, and cybersecurity exercises. Through its work, HSCC promotes the principle that cyber safety is patient safety, helping healthcare organizations improve their ability to protect data, systems, research, manufacturing, and patient care.