Protecting the NHS from Cyber Attacks

Given that cyber security underwrites public trust in digital services and technologies, the new cyber strategy sets out a vision for reducing the cyber security risk to health and social care organizations across the Department of Health and Social Care (DHSC), National Health Service (NHS) organizations, local authorities, independent social care providers, and suppliers-which includes pharmaceutical manufacturers. [...]attacks can cause a complete loss of access to clinical and administrative information technology (IT) systems, resulting in significant disruption in day-to-day operations. According to the NCSC, ransomware attacks are increasingly seen to include data theft and extortion with a threat of data leaks (3). According to the UK government's recently published policy paper outlining the new cyber security strategy, "all these threats pose risk not just to patient and staff safety, but also to public trust in a health and social care system that can and must safeguard people's data" (2).

Securing Europe's Critical Entities from Cyber Attacks

The revised NIS-2 Directive has been assigned to the Committee on Industry, Research, and Energy (ITRE), within the European Parliament, and is intended to form one of the baselines for the European cybersecurity framework, as well as act as a central tool in advancing Europe's strategic autonomy and the Digital Europe Programme (3). The intention is that cyber resilience must be considered a priority at board and senior management level rather than be confined to the remit of technical teams. European Parliament Adopts New Draft Directive," Technology Law Dispatch, Reed Smith LLP, 20 Jan. 2022.

Enhanced Role of EMA in EU Crisis Response

The regulation also sets out obligations on marketing authorization holders (MAHs) and medical devices manufacturers, authorized representatives, importers, distributors, and notified bodies duties to: * Provide information that will assist with the monitoring by the MSSG/MDSSG of shortages of medicinal products and devices contained in the critical medicines list and updating this when necessary * Provide a justification for any failure to provide the requested information by the established deadlines * Immediately provide any evidence of an actual or potential shortage of medicinal products or devices * Provide information to EMA by 2 Sep. 2022 that will enable the establishment of a Single Point of Contact (SPOC) network, and the industry Single Point of Contact (iSPOC) network, with mandates to updating this when necessary (7). Enhanced advisory role In addition to the measures designed to address medicinal and medical device shortages, an Emergency Task Force (ETF) will also be established within EMA to provide scientific advice and review evidence on medicines that have the potential to address public health emergencies, offer scientific support to facilitate clinical trials, and support existing EMA committees with their authorization and safety monitoring of medicines (8). According to the document published by EMA on Crisis Preparedness and Management, the key benefits for EMA of having these responsibilities include: * Accelerated evaluation and access to safe and effective medicines which could treat or prevent a disease causing, or likely to cause, a public health emergency * Improved quality of data and the effective use of resources through increased support at EU level towards the conducting of clinical trials in preparation for, and during a public health emergency * Improved coordination and harmonization at EU level in preparation for and during a public health emergency (7).