The Department of Health and Human Services rolled out new guidance to protect organizations in the health care sector from cyberattacks. The publications are the end result of a requirement in the 2015 Cybersecurity Act to align healthcare security practices and are being marketed by HHS as a starter kit for both IT and non-IT health care professionals to improve baseline cybersecurity.