Security News > 2021 > November > How to strengthen incident response in the health sector

The report assesses the services developed and currently used by CSIRTs across the Member States, analyzes the trends in relation to sector-specific CSIRTs and issues recommendations to strengthen the incident response capabilities in the health sector.

National CSIRTs are the entities in charge of incident response in the health sector.

Although dedicated health sector CSIRTs are still the exception in the Member States, sector specific CSIRT cooperation is developing.

The lack of sector-specific knowledge or capacity of national CSIRTs, lessons learned from past incidents and the implementation of the NIS Directive appear to be the main drivers of the creation of sector-specific incident response capabilities in the health sector.

Shared frameworks for incident classification and threat modelling, education activities and a network allowing communication between incident response actors constitute the main resources and tools currently supporting the development of incident response capabilities.

Capitalise on the expertise of the health CSIRTs for helping Operators of Essential Services develop their incident response capabilities by establishing sector-specific regulations, cooperation agreements, communication channels with OES, public-private partnerships, etc.

News URL

https://www.helpnetsecurity.com/2021/11/19/health-sector-csirt-capabilities/