Congress established the Health Care Industry Cybersecurity Task Force (the “Task Force”) in the Cybersecurity Act of 2015 (the “Act”) to address the challenges the health care industry faces when securing and protecting itself against cybersecurity incidents. While all health care delivery organizations have a responsibility to secure their systems and patient data, many organizations face significant resource constraints, which hinders their ability to do so. As a result, the public has seen an increase in ransomware attacks and large privacy breaches, which inevitably affects patient care.