OFFICIAL REFERENCE
NIS2 Directive (EU) 2022/2555
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
RESOURCES & REFERENCES
Prepare with the
right information.
Practical material for acute-care hospitals, hospital groups and clinical infrastructure teams.
Start with primary sources.
OFFICIAL REFERENCE
GDPR: Regulation (EU) 2016/679
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
European healthcare cybersecurity action plan
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
HHS: HIPAA Security Rule and guidance
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
NIST SP 800-115: security testing and assessment
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
Practical sector guides
Planning5 min read
Hospital pentest rules of engagement: the operational checklist
Define who can stop the test, which clinical systems are excluded and how unexpected events are handled.
Read the perspective
Delivery4 min read
How to test hospital segmentation without treating every device alike
Start with named paths, clinical dependencies and vendor-approved endpoints.
Read the perspectiveDelivery4 min read
A restored server is not a restored hospital service
Measure identity, integration and clinical validation dependencies as part of a controlled recovery rehearsal.
Read the perspective