The protection of health information is a national priority. As healthcare delivery systems modernize and cybersecurity threats become more sophisticated, the safeguarding of sensitive data—including Personally Identifiable Information (PII) and Protected Health Information (PHI)—is essential to upholding public trust and ensuring operational integrity. In response to these growing demands, the Centers for Medicare & Medicaid Services (CMS) has introduced Acceptable Risk Controls for ACA, Medicaid, and Provider Entities (ARC AMPE). This new framework replaces the outdated MARS-E standard and aligns healthcare risk and compliance operations with NIST SP 800-53 Rev. 5.
You may be interested in
Compromise is Inevitable. Here’s how to Lessen the Impact.
You Can't Stop Every Attack. You Can Control What Happens Next. ...
How They’re Moving Through Your Environment Right Now.
How they move through a critical infrastructure environment is not what most peopl...
Iranian Threat Actors Are Already Inside.
What you're hearing about the Iran conflict and U.S. critical infrastructure is too pa...