An overview of how a public-private partnership resulted in HHS publishing Cybersecurity Performance Goals (CPGs) for the Healthcare and Public Health (HPH) critical infrastructure sector, and a preview of upcoming regulatory mandatory requirements, incentives and penalties.