A National Survey of Hospital Cyber Attack Emergency Operation Preparedness.

OBJECTIVE: Cyberattacks on healthcare systems are increasing in frequency and severity. Hospitals need to integrate cybersecurity preparedness into their emergency operations planning and response to mitigate adverse outcomes during increasingly likely cyber events. No data currently exist regarding the level of preparedness of United States hospital systems for cybersecurity attacks. We surveyed hospital emergency managers to assess cybersecurity preparedness for these events. METHODS: Fifty-seven emergency managers representing hospitals across the United States participated in an online Qualtrics survey regarding current preparedness and response procedures for cybersecurity hazards. RESULTS: Survey responses between April 2019 and May 2021 demonstrated that a majority of hospital systems surveyed included cybersecurity disasters in their HVA (82.4%; 47/57), and most ranked it as 1 of their top 5 priorities (57.4%; 27/47). However, over half denied specifically mentioning cybersecurity in their Emergency Operations Plans (EOPs; 52.6%; 30/57). Fourteen of the 57 hospital systems (24.5%) endorsed previously activating an emergency response for a cybersecurity incident unrelated to information technology (IT) failure. CONCLUSIONS: The survey results suggest that American hospitals are currently underprepared for cybersecurity disasters. We emphasize the importance of prioritizing cybersecurity in Hazard Vulnerability Analyses (HVAs) and implementing specific EOP annexes for cybersecurity emergencies.

Supporting decision making in cross-border regions: a health technology assessment tool for hospitals.

OBJECTIVES: The aim of this study was to develop an health technology assessment (HTA) decision tool to support the decision-making process on health technologies for hospital decision makers in cross-border regions. METHODS: Several methods were used to collect information necessary to develop the cross-border mini-HTA decision tool. The literature was inventoried on HTA in border regions and local settings and the use of HTA by local decision makers. Semi-structured interviews with hospital decision makers in cross-border regions were also performed. Based on group discussion of the resulting information, it was decided to use the Danish mini-HTA guideline as a starting point for development of the decision tool. After finishing the first version of the decision tool it was tested in two pilot studies. RESULTS: Some questions in the Danish mini-HTA guideline were not relevant. Other questions needed rephrasing and questions about cross-border situations were added. The pilots showed several missing topics, including legal questions and reimbursement issues. The final decision tool consists of three sections: a general section, a section for hospitals not cooperating cross-border and a section for hospitals that are cooperating with hospitals across a national or regional border. CONCLUSIONS: Based on our literature search, this may be the first cross-border mini-HTA decision tool. The decision tool will be of help for healthcare professionals and decision makers in border settings who would like to use HTA evidence to support their decision-making process.