Hey everyone, I'm Drex, and this is the Two Minute Drill. We do at least three security stories at least two times a week, all part of one great community, the 229 cyber and risk community. Here's some stuff you probably want to know about. By now you may have heard that Lurie Children's in Chicago has been hit by a cyber incident.

Last week I talked about new voluntary cyber performance goals, CPGs, from Health and Human Services. If you're not paying attention, you probably should be. Because at the state level, it looks like Florida is on its way to advancing a piece of legislation that would create a safe harbor for organizations that have in place Reasonable security measures at the time of the breach.

That includes stuff like adhering to NIST or ISO frameworks. The devil is, of course, in the details. Florida joins Ohio, Utah, Connecticut, and others, creating limited liability for organizations that can show they were trying hard to be secure. One way to become part of the 229 Security Community is to help crowdsource the stories I talk about here.

Just hit ThisWeekHealth. com slash news. Then click on become a contributor. It's super easy. You'll get a text number and you'll be able to just text stories that you want to share to that number and we'll vet them and then we'll get them onto the site. That's also the place where I drop all the stories I talk about here on the two minute drill.

Please like and share and tag folks who should listen to this post. By the way, I'm on my way. Thursday morning to a double 229 summit in California. Both CIOs and CISOs will be having events at the same time. I'm really looking forward to hanging out with some of my biggest heroes, the folks who are making healthcare better, faster, cheaper, safer, and easier to access for patients and families.

Want to know more? Hit me up at drex at thisweekhealth. com or check out the new 229 Cyber and Risk Community at thisweekhealth. com security. Stay a little paranoid and I'll see you around campus.