Behavioral responses to a cyber attack in a hospital environment

Area of Science:

• Healthcare Cybersecurity
• Human Factors in Medicine
• Clinical Engineering

Background:

• Technical and organizational measures are crucial for mitigating cyber threats in hospitals.
• Human behavior serves as a critical last line of defense in healthcare cybersecurity, complementing technical security measures.
• Effective training for medical staff is essential for executing procedures during cyber incidents.

Purpose of the Study:

• To conduct the first qualitative, interdisciplinary research on intermediate care unit staff reactions to a simulated cyberattack on patient monitoring equipment.
• To analyze the behavioral responses of nurses during a simulated cyberattack scenario.

Main Methods:

• A simulation-based experiment was conducted in a hospital training environment.
• Twenty intensive care nurses participated in the study.
• Qualitative behavioral analysis was performed on high-performing participants (HPP) and low-performing participants (LPP).

Main Results:

• 12 out of 20 participating nurses (60%) recognized the incorrect behavior of patient monitors during the simulated cyberattack.
• High-performing participants exhibited fewer stress indicators, showed more supportive behavior towards colleagues, and utilized analog systems more frequently than low-performing participants.
• A significant portion (40%) of participants failed to recognize the cyberattack, indicating a gap in preparedness.

Conclusions:

• The study underscores the need for enhanced tools and comprehensive training to better prepare hospital staff for cyberattacks.
• Improving staff awareness and response capabilities is vital for strengthening hospital cybersecurity defenses.
• Interdisciplinary research is valuable for understanding human factors in clinical cyber incident response.