Incident Response Plan for a Small to Medium Sized Hospital
This addresses the need for improved cybersecurity and compliance in healthcare organizations, but it is incremental as it adapts an existing emergency services model.
The paper tackles the problem of inadequate cyber incident response in small to medium hospitals by proposing the use of the Incident Command System model to establish a Cyber Incident Response Team, aiming to minimize data loss and provide forensic data.
Most small to medium health care organizations do not have the capability to address cyber incidents within the organization. Those that do are poorly trained and ill equipped. These health care organizations are subject to various laws that address privacy concerns, proper handling of financial information, and Personally Identifiable Information. Currently an IT staff handles responses to these incidents in an Ad Hoc manner. A properly trained, staffed, and equipped Cyber Incident Response Team is needed to quickly respond to these incidents to minimize data loss, and provide forensic data for the purpose of notification, disciplinary action, legal action, and to remove the risk vector. This paper will use the proven Incident Command System model used in emergency services to show any sized agency can have an adequate CIRT