Germany Security Critical Tender

Laboratories and hospitals in Germany are well protected against cyber attacks and failures in their critical services. This is the result of two studies commissioned by the Federal Office for Information Security BSI . This shows that technical protective measures have generally been implemented well by the operators of the facilities but that there is still a need to catch up on organizational IT security measures especially in hospitals . For example the BSI found in the study that a systematic ITRisk management in many homes is not yet at the necessary level. In both areas both legally regulated operators of critical infrastructures and facilities that did not meet the respective threshold values of the BSI - Kritis Regulation were examined.BSI President Arne Schnbohm explains Last but not least the corona crisis has shown how important functioning and securely digitized medical facilities are. The care of patients and the provision of laboratory services must be guaranteed just as reliably as the protection of sensitive patient data. Digitization in the healthcare sector opens up great opportunities for better care and more efficiency in the collaboration between the various medical institutions but in view of a threat situation that does not stop at hospitals and other medical institutions information security is also becoming increasingly important for operators Focus whose facilities are not under the IT regulationsSecurity law fall. Rightly so because society relies on functioning clinics and laboratories. It is therefore necessary for operators to provide the systems and processes that are necessary for their critical services with the best possible security. The studies for the KRITIS health sector were developed with the aim of identifying the relevant processes of critical services and examining the status quo of information security in hospitals and laboratories in Germany. The studies also contain recommendations for action to increase the level of protection and an outlook on the future of digitization within the two industries. The hospitals show that the relevant IT systems and components for the provision of critical services are usually designed redundantly. Classic technical countermeasures protect against attacks and malware. When implementing organizational IT-Security measures however there is still room for improvement.Due to the advanced level of IT maturity and the high availability requirements medical laboratories have extensive protective measures against failures. In the area of laboratories it has also been shown that an industry-specific security standard B3S contributes to a significant increase in information security. Medical laboratories based on the B3S are already well prepared for the ongoing digital transformation. The summaries of the study results and recommendations for action are available on the BSI website.