EU To Strengthen Cyber Defence In Healthcare  

The European Commission has published a comprehensive plan to fortify the cyber security of hospitals and healthcare providers across the EU. 

Recognising the increasing frequency of cyber attacks on healthcare systems, the EU Action Plan aims to safeguard patient care, improve response capabilities, and establish trust in digital healthcare solutions. 

The Plan is intended to demonstrate the EU's  a commitment to building a secure and resilient healthcare sector.  

The healthcare sector has witnessed a rise in cyber attacks in recent years. In 2023 alone, EU Member States reported 309 significant cyber security incidents targeting healthcare providers, more than any other critical industry.  These disruptions, which can delay medical procedures and endanger lives, highlight the pressing need for resilient cybersecurity strategies. 

Enhanced Prevention

The plan emphasises strengthening the healthcare sector’s preparedness to prevent cyber security incidents.  This includes: 

• Guidance on Critical Cyber Security Practices: Hospitals and healthcare providers will receive tailored guidelines to implement best practices for cyber security. 

• Cyber Security Vouchers: Financial assistance in the form of vouchers will be made available to micro, small, and medium-sized healthcare providers to enhance their cyber security capabilities. 

• Learning Resources: New educational tools and training programs will be developed to equip healthcare professionals with the knowledge needed to navigate cybersecurity challenges. 

Improved Threat Detection: The EU Action Plan proposes the establishment of a Cybersecurity Support Centre for Hospitals and Healthcare Providers under the guidance of ENISA, the EU Agency for Cybersecurity.  

• By 2026, the Centre will provide an EU-wide early warning system, offering near-real-time alerts about potential cyber threats. 

Effective Response to Cyber Attacks: To minimise the impact of cyber incidents, the Action Plan includes the following measures: 

• A rapid response service under the EU Cybersecurity Reserve, leveraging private incident response providers to support healthcare organisations. 

• Development of response playbooks to guide healthcare organisations in handling specific threats, such as ransomware. 

• National cyber security exercises to strengthen incident response capabilities across Member States. 

• Encouragement for Member States to mandate the reporting of ransom payments, enabling authorities to provide support and conduct follow-ups with law enforcement. 

Deterrence: To discourage cyber attacks on the EU healthcare systems, the plan includes the use of the Cyber Diplomacy Toolbox, a coordinated EU diplomatic response to malicious cyber activities.  

• This framework aims to hold cyber threat actors accountable and protect critical healthcare infrastructure. 

Collaborative Implementation 

The success of the EU Action Plan will depend on collaboration amongst healthcare providers, Member States, and the cyber security community.  To ensure the plan is effective and addresses the needs of all stakeholders, the Commission will soon launch a public consultation open to citizens and industry experts. The feedback gathered will help refine the proposed measures, with specific actions scheduled for rollout in 2025 and 2026. 

Legislative Framework 

The EU Action Plan builds on existing EU legislation.  Healthcare providers are identified as a sector of high criticality under the NIS2 Directive, which works in tandem with the Cyber Resilience Act, a landmark EU regulation that mandates cyber security requirements for digital products.  

The recently established Cyber Emergency Mechanism under the Cyber Solidarity Act will play a crucial role in detecting, preparing for, and responding to cyber security threats. The initiative also supports the broader goal of creating a European Health Data Space, a framework designed to empower citizens with control over their health data while ensuring the security of sensitive information. 

Executive Vice-President for Tech Sovereignty, Security, & Democracy, Henna Virkkunen, emphasised the importance of resilience in healthcare systems: “We are launching an Action Plan to ensure that healthcare systems, institutions, and connected medical devices are resilient... Prevention is better than cure, so we need to prevent cyber-attacks from happening. But if they happen, we need to have everything in place to detect them and to quickly respond and recover.” 

By addressing cyber security challenges through prevention, detection, response, and deterrence, the plan lays the groundwork for a safer healthcare environment where technology empowers patients, enhances care, and supports professionals. 

EU Commision   |    IndustrialCyber   |    Cyber Express  |  SC Magazine  |    Infosecurity Magazine 

Image: Mart-Production

You Might Also Read: 

Protecting Patient Privacy: Cybersecurity Priorities For Healthcare:

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

• Individual £5 per month or £50 per year. Sign Up

• Multi-User, Corporate & Library Accounts Available on Request

• Inquiries: Contact Cyber Security Intelligence    

Cyber Security Intelligence: Captured Organised & Accessible