白宫与卫生部启动Project Lifeline 250试点：为期6个月，为南卡罗来纳州农村医院免费提供网络安全支持
白宫国家网络主任办公室（ONCD）与美国卫生与公众服务部（HHS）10月26日在南卡罗来纳州启动 Project Lifeline 250 试点：这项为期6个月的联邦、州与私营部门联合行动，将为该州农村医院免费提供网络安全硬件与服务，帮助其防御网络攻击并在网络事件后维持关键医疗服务。
南卡罗来纳州州长 Henry McMaster 10月26日与白宫国家网络主任 Sean Cairncross 共同宣布启动该试点。McMaster 表示，网络威胁是美国国家安全面临的日益严峻的挑战，Project Lifeline 250 是确保该州农村医院拥有抵御网络攻击所需资源、继续提供关键医疗服务的重要一步。Cairncross 表示，该试点把美国领先的科技产业与农村医院连接起来，工作包括防御医院网络、在事件初发后部署实体备份设备以保证受影响医院仍能提供关键医疗服务，以及识别并替换高风险与老旧设备。
据州长办公室介绍，试点聚焦三项工作：加强医院网络防御、提供备份技术帮助医院在网络攻击后维持运转、识别在关键医疗场景中使用的高风险医疗及其他技术设备。参与的科技公司包括 Cisco、Cyera、Microsoft、Trellix 与 Zscaler，各公司将分别提供网络安全专业支持、数据清点、威胁检测与响应等服务，其中 Microsoft 表示其曾为全美逾870家农村医院提供支持。该行动由 ONCD、南卡罗来纳州关键基础设施网络安全（SC CIC）项目、私营部门伙伴、联邦机构与地方政府共同参与，州执法厅（SLED）参与协调。
州长办公室表示，SC CIC 项目由 McMaster 于2017年以第2017-08号行政令设立，旨在加强该州关键基础设施的网络威胁防护。此次南卡罗来纳州试点承接此前在德州推出的 Project Watershed 250（面向水务设施），将评估可推广至全美各地社区的网络安全解决方案。据 Cybersecurity Dive 10月27日报道，HHS 首席顾问 Chris Klomp 10月26日在 Newberry 的 Newberry Health 举行的宣布活动上表示，一家医院平均有逾26,000台接入互联网的设备，凸显医院面临的网络风险规模。
White House and HHS Launch Project Lifeline 250: Six-Month Pilot Gives South Carolina Rural Hospitals Free Cybersecurity Support
The White House Office of the National Cyber Director (ONCD) and the U.S. Department of Health and Human Services (HHS) on October 26 launched Project Lifeline 250 in South Carolina, a six-month joint federal, state and private-sector pilot that will give the state's rural hospitals cybersecurity hardware and services at no cost to participating hospitals, to help them defend against cyberattacks and maintain critical care during a cyber incident.
South Carolina Governor Henry McMaster joined White House National Cyber Director Sean Cairncross to launch the pilot on October 26. McMaster said cyber threats are a rising challenge to the nation's security and that Project Lifeline 250 is an important step toward ensuring South Carolina's rural hospitals have the resources they need to defend against cyberattacks and continue providing critical care. Cairncross said the pilot connects world-leading American industry with rural hospitals to defend hospital networks, deploy physical backup devices after an initial incident so an impacted hospital can still provide critical care, and identify and replace high-risk and legacy devices.
According to the Governor's office, the pilot focuses on strengthening hospital network defenses, providing backup technology to help hospitals maintain operations following a cyberattack, and identifying high-risk medical and other technology devices used in critical care settings. Industry partners include Cisco, Cyera, Microsoft, Trellix and Zscaler, contributing cybersecurity expertise, data inventory work and threat detection and response services; Microsoft said it brings experience supporting more than 870 rural hospitals across the country. The effort brings together ONCD, the South Carolina Critical Infrastructure Cybersecurity (SC CIC) program, private-sector partners, federal agencies and local governments, with the South Carolina Law Enforcement Division (SLED) taking part.
The Governor's office said McMaster established the SC CIC program in 2017 through Executive Order 2017-08 to strengthen protection of the state's critical infrastructure against cyber threats. Building on the Project Watershed 250 effort for water utilities in Texas, the South Carolina pilot will evaluate cybersecurity solutions that can be scaled to protect infrastructure in communities nationwide. According to Cybersecurity Dive on October 27, HHS Chief Counselor Chris Klomp said at the October 26 announcement event at Newberry Health in Newberry that the average hospital has more than 26,000 internet-exposed devices on its network, underscoring the scale of the risk hospitals face.
来源：GSM·美国（原文链接）
图片来源：图：美国社区医院急诊入口资料图：位于 Kansas 州 Lawrence 的 LMH Health 医院急诊部入口。照片：Wikipedialuva，CC BY 4.0，经 Wikimedia Commons。 / A U.S. community hospital emergency entrance: the emergency department entrance of LMH Health in Lawrence, Kansas. Photo: Wikipedialuva, CC BY 4.0, via Wikimedia Commons.
