# Proposed HIPAA Security Rule Updates for Vulnerability Management

DevFeed: [Proposed HIPAA Security Rule Updates for Vulnerability Management](<https://devfeed.tech/articles/hipaa-s-new-vulnerability-management-guidelines-what-you-need-to-know-13081.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/hipaas-new-vulnerability-management-guidelines-what-you-need-to-know>)

Published: 2025-02-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [cve remediation](<https://devfeed.tech/topics/cve-remediation.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [cves](<https://devfeed.tech/tags/cves.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [hipaa](<https://devfeed.tech/tags/hipaa.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

The article explains proposed updates to HIPAA's Security Rule, including requirements for container security, risk analysis, data-security practices, and remediation of Common Vulnerabilities and Exposures (CVEs). It states that the proposal would require healthcare organizations to address Critical CVEs within 15 calendar days of discovery.

## Source excerpt

New guidelines for HIPAA's Security Rule have been proposed, which include updated requirements for vulnerability management, risk management, and more.