INSIGHT

Cyber resilience and incident response in healthcare

By Valeska Bloch, Phil O'Sullivan, Maddison Ryan

A guide for healthcare organisations and boards 5 min read

Cyber incidents are disproportionately frequent in the healthcare sector—and their consequences are often more severe.

The potentially life-threatening risk to patient care means that healthcare providers that can't withstand or recover quickly from a major cyber incident are likely to become fertile ground for class action activity and regulatory enforcement action.

Despite this, very little sector-specific guidance has been published about how healthcare providers should prepare for and respond to a major cyber incident that significantly impacts their operations.

 We’ve developed a new guide to cyber resilience and incident response for healthcare sector organisations and boards to help address this gap. The guide includes practical tools to:

  • navigate complex regulatory requirements
  • strengthen operational resilience
  • manage supply chain vulnerabilities
  • identify key governance red flags.

Footnotes

  1. Fierce Healthcare, Industry Voices—Forget credit card numbers. Medical records are the hottest items on the dark web; HIPAA Proposal, Paper, page 912–913.