| The money
With the Rural Health Transformation Program, the Centers for Medicare & Medicaid Services (CMS) is sending $50 billion to states over five years, with $10 billion available each year from fiscal year 2026 through 2030. All 50 states received first-year awards this year, averaging about $200 million and ranging from $147 million to $281 million. CMS also made technology part of the program’s design, including funding for data security, cybersecurity, remote care, interoperability, and other digital health tools.For rural providers, that matters because the cybersecurity gap is rarely about awareness. Most rural hospitals know they are exposed. How it can help
With the CMS funding, states can take cybersecurity off the “we should really get to that” list and into a rural health investment plan. The best use of the money will be practical, such as shared cybersecurity services, risk-reduction readiness assessments, workforce support, response playbooks, and basic controls that are implemented well enough to hold up under pressure. Those may not sound like dramatic changes, but they are the work rural hospitals need most. The private sector has an important role in building that capacity. Rural hospitals often cannot hire a full cybersecurity team or build specialized cyber programs from scratch. Outside partners can help fill those gaps by providing managed detection, endpoint protection, readiness assessments, training, playbook development, and implementation support. The measure of success should be: does the hospital come out of the work with stronger basic cyber hygiene and a clearer path to improve? The goal
Rural hospitals need trained people, tested backups, downtime procedures, clinical continuity planning, and staff who know what to do when an alert fires. A framework won’t substitute for that work, but it helps organize it and makes progress measurable. CMS funding gives states a chance to help rural hospitals build that muscle. A one-time assessment won’t get you there, but rather the goal is security practices a hospital can sustain over time. — By MedCity Influencer Bimel Sheth |
No comments