Cybersecurity threats can disrupt patient care, clinical workflows and a medical group’s financial operations — even when the attack happens somewhere else in the healthcare ecosystem.

This MGMA member-exclusive resource from the MGMA Government Affairs team gives medical practice leaders a practical overview of today’s cybersecurity policy landscape and steps they can take now to strengthen their organizations.

Learn what the current HIPAA Security Rule requires, what could change under HHS’ proposed update and why recognized security practices matter for HIPAA enforcement. The resource also covers emerging cybersecurity risks tied to artificial intelligence, including vendor oversight, business associate agreements and “shadow AI.”

Practice leaders will also find practical steps for improving cyber hygiene, including security risk analysis, multifactor authentication, encryption, technology inventories, backups and staff training. The guide highlights free federal resources, including the updated HHS Security Risk Assessment Tool for small and medium-sized practices.

Published in October 2026, the resource also explains MGMA’s advocacy for cybersecurity policies that protect patients while recognizing the financial and operational realities facing medical groups.