CyberSecurity template for myQA PROactive
You can download the template for myQA PROactive directly from this article - see below.
Content: example of risk analysis for hospital cybersecurity, taking into account the cyber security relevant assets which could be attacked, and the safety measures suitable to protect them.
References:
- Younge, K. C., et al. “Practical Implementation of Failure Mode and Effects Analysis for Safety and Efficiency in Stereotactic Radiosurgery.” Int. J. Rad. Oncol. Biol Phys. 91, 2015: 1003–8. https://doi.org/10.1016/j.ijrobp.2014.12.033.
- ISO/IEC 27002- Information Security, Cybersecurity and Privacy Protection — Information Security Controls, 2022.
- European Union Agency for Cybersecurity. ENISA Threat Landscape 2022, 2022.
- Joyce, Christine, Faustin Laurentiu Roman, Brett Miller, John Jeffries, and Robert C. Miller. “Emerging Cybersecurity Threats in Radiation Oncology.” Advances in Radiation Oncology 6, no. 6 (September 20, 2021): 100796. https://doi.org/10.1016/j.adro.2021.100796.
- Office of information security, and Health sector cybersecurity coordination center. “2022 Healthcare Cybersecurity Year in Review, and a 2023 Look-Ahead.” February 9, 2023.
- Verizon. “2022 Data Breach Investigations Report,” 2022.
- IBM Security. “Cost of a Data Breach Report 2022,” 2022. https://www.ibm.com/downloads/cas/3R8N1DZJ.
- Sophos. “The State of Ransomware 2022,” 2022. https://news.sophos.com/en-us/2022/04/27/the-state-of-ransomware-2022/.
- CISCO. “Cybersecurity Threat Trends: Phishing, Crypto Top the List,” 2021. https://umbrella.cisco.com/info/2021-cyber-security-threat-trends-phishing-crypto-top-the-list.
Important Notice:
Risk analysis templates may serve as a starting point for users who would like to adapt them to their own clinical processes without performing a risk analysis from scratch.
All data in tempaltes must be carefully reviewed, adapted, and integrated in order to generate a valid risk anaysis of a clinical process.
A template must be carefully reviewed, adapted and integrated in order to generate a valid risk analysis of a clinical process.
A template shall not be used as a ready-made riask analysis for a clinical process.