Steps include enhanced guidance for securing networks and strengthened requirements for healthcare data protection.