As more healthcare systems are digitalized, the quality of patient care and operational efficiency have improved, but at the same time, the modernization of healthcare systems has made healthcare organizations extra vulnerable to serious cybersecurity threats. This paper reveals major gaps and inconsistencies between healthcare business units, including gaps between healthcare organizations, as it inspects existing cybersecurity practices and policies in the healthcare sector. The NIST Cybersecurity Framework along with GDPR and HIPAA have been adopted but ransomware, breaches, and insider incidents remain ongoing threats to healthcare organizations. The study proposes a comprehensive three-layered approach to address the above three challenges: (1) mathematical vulnerability assessment model based on Asset Vulnerability Impact Assessment Model (A-VIAM), (2) integration of advanced technologies such as machine learning for threat detection and response, and (3) development of a sound security management framework tailor-made for healthcare facilities. The contribution of this research is a comprehensive approach for mitigating risk from cyber to a reduced level which is at acceptable level using Hybrid methods such as Content Analysis and Quantitative Modeling with Comparative Analysis. Managers, policy makers and digital security specialists in healthcare will benefit from the research results increasing their knowledge about digital resilience in healthcare.
Thawbaan et al. (Tue,) studied this question.