Although the frequency of cyberattacks affecting the health care industry has surged in recent years, the HIPAA Security Rule has remained unchanged for over a decade. In response to such developments, proposed rulemaking to modify the existing Security Rule has been introduced to address these vulnerabilities through more robust cybersecurity protections for electronic PHI. This presentation will dive into the proposed changes and demonstrate how Covered Entities and Business Associates should begin evaluating their current cybersecurity practices to be prepared for future HIPAA compliance.