This bill strengthens cybersecurity protections for hospitals, health systems, and other healthcare organizations by requiring better coordination between the Department of Health and Human Services and the Cybersecurity and Infrastructure Security Agency. The legislation responds to a significant increase in cyberattacks on healthcare facilities—large cyber breaches of healthcare information systems rose 93 percent between 2018 and 2022, affecting nearly 42 million individuals. The bill requires several actions within specific timelines, including updating a sector-specific cybersecurity risk management plan within one year, establishing training programs for healthcare owners and operators, identifying high-risk healthcare assets, and submitting reports to Congress within 120 days to 18 months. The measure does not authorize any new federal funding and instead requires agencies to work with existing resources to improve information sharing, provide cybersecurity resources and advisors to healthcare entities, and address workforce shortages in the healthcare cybersecurity field.