Beyond the Firewall: A Multistakeholder Simulation for Cybersecurity Response in Health Information and Informatics...

Area of Science:

• Health Informatics
• Cybersecurity Education
• Healthcare Management

Background:

• Ransomware attacks threaten healthcare systems, impacting operations and patient data.
• Current education for health information management (HIM) professionals lacks practical cybersecurity incident response training.
• There's a need for applied learning to prepare HIM professionals for cybersecurity threats.

Purpose of the Study:

• To design, implement, and evaluate a multistakeholder tabletop simulation.
• To enhance cybersecurity incident response competencies.
• To improve regulatory compliance and interdisciplinary collaboration skills.

Main Methods:

• A simulation-based educational intervention was conducted in two settings: a professional conference and a university classroom.
• The tabletop exercise simulated a ransomware attack in an acute care hospital.
• Participants assumed interdisciplinary roles (leadership, clinical, technical, compliance, vendor).

Main Results:

• Participants found the simulation realistic, well-structured, and effective for learning.
• The simulation improved understanding of cybersecurity response, privacy principles, and team roles.
• Differences in participant responses highlighted variations in experience levels.

Conclusions:

• Tabletop simulation is an effective, practice-oriented method for HIM and informatics education.
• The simulation fosters applied learning and workforce readiness in cybersecurity.
• Simulation-based approaches offer a scalable strategy for enhancing cybersecurity preparedness.