[IT Failures in Hospitals - Structures and Processes in Hospitals for Coping Cyber Attacks]

Area of Science:

• Healthcare Informatics
• Cybersecurity
• Critical Infrastructure Protection

Background:

• Hospitals are critical infrastructure increasingly targeted by cyber attacks, causing prolonged disruptions.
• National strategies mandate clinics implement preventive measures against cyber incidents.
• IT-dependent processes in clinics require defined failure concepts and emergency plans.

Purpose of the Study:

• To outline essential components of cyber attack preparedness for clinics.
• To emphasize the legal obligation for clinics to protect critical IT infrastructure.
• To detail necessary emergency planning for IT system failures in healthcare settings.

Main Methods:

• Evaluating IT-dependent processes within clinics.
• Developing failure concepts and tailored emergency plans for computer system failures.
• Establishing accessible paper-based alternative solutions for critical functions.

Main Results:

• Cyber attacks can disrupt clinic functionality for weeks to months.
• Comprehensive emergency plans and paper backups are crucial for operational continuity.
• Robust preparedness, including regular scans and real-time backups, facilitates quicker network restoration.

Conclusions:

• Clinics must proactively develop and maintain cyber emergency preparedness plans.
• Integrating paper-based alternatives ensures essential services during IT outages.
• Effective preparedness strategies are vital for minimizing the impact of cyber attacks on healthcare delivery.