The Hacking Policy Council (“HPC”) submits the following comments in response to the New York Department of Health’s proposed addition to Section 405.46 to Title 10 NYCRR (“Hospital Cybersecurity Requirements). We thank the Department of Health for the opportunity to provide input towards this important proposal. The HPC is a group of industry experts dedicated to creating a more favorable legal, policy, and business environment for security vulnerability disclosure and management, good faith security research, penetration testing, bug bounty programs, and independent repair for security. From this perspective, we recognize the importance of cybersecurity for healthcare and are broadly supportive of the Department of Health’s efforts to update sector security practices
Read Next
Across the Atlantic, Cyber Policy Is Running Into the Same Terminology Problem
The report covers Europe’s cybersecurity industry, investment landscape, and evolving cyber posture, but it also spends considerable time on a more basic question: what actually counts as “offensive cybersecurity” in the first place?
UNGA Takeaways: Digital Sovereignty Without Digital Isolation
A central theme emerged across the conversation: greater digital sovereignty does not have to mean greater digital isolation.
Whitepaper on Coordinating Vulnerability Response in the Age of AI
The report highlights that open-source software faces particularly acute coordination challenges due to fragmented ownership and limited maintainer resources, compared to the more centralized response model in proprietary software.
