Sectors · Healthcare
For healthcare facilities
A hospital cannot stop while an investigation runs. Knowing what was already circulating, and since when, decides what is urgent.
A facility's chain
Risk rarely comes through the front door
Patient records, imaging, laboratory, logistics, biomedical maintenance: as many third parties with access to the information system, whose exposure becomes yours.
A healthcare facility's chain
- Patient record system
- Imaging
- Laboratory
- Logistics and catering
- Biomedical maintenance
11/2023an extract of a clinician account database offered for sale, long before any notification
A hospital cannot stop while an investigation runs. Knowing what was already circulating, and since when, makes it possible to separate what is urgent from what belongs to planned remediation.
Schematic. The dates are illustrative and describe no real facility.
What it changes
Triage, evidence, notification
Triage without stopping care
An old, already widely spread exposure does not call for the same response as something put on sale yesterday.
Documenting the notification
What got out, where, and since when: that is what you will be asked to establish, not what you assume.
Protecting staff
Clinician accounts, personal contact details, rosters: what exposes a team as much as a system.
The frame
An essential entity under NIS2
Healthcare is among the highly critical sectors of Directive (EU) 2022/2555. The duties on risk management, supply-chain monitoring and notification therefore apply, and they have to be documented.
We do not operate inside your information system: we look at what has left it, from the outside, on publicly accessible sources. That is what makes the finding usable without adding anything to your attack surface.
Start with a baseline
One facility's perimeter is enough to see what is already circulating, and since when.