Gioulekas Fotios, Stamatiadis Evangelos, Tzikas Athanasios, Gounaris Konstantinos, Georgiadou Anna, Michalitsi-Psarrou Ariadni, Doukas Georgios, Kontoulis Michael, Nikoloudakis Yannis, Marin Sergiu, Cabecinha Ricardo, Ntanos Christos
5th Regional Health Authority of Thessaly & Sterea, Mezourlo, 411 10 Larissa, Greece.
Decision Support Systems Laboratory, National Technical University of Athens, 15 780 Zografou, Greece.
Healthcare (Basel). 2022 Feb 9;10(2):327. doi: 10.3390/healthcare10020327.
Recent studies report that cybersecurity breaches noticed in hospitals are associated with low levels of personnel's cybersecurity awareness. This work aims to assess the cybersecurity culture in healthcare institutions from middle- to low-income EU countries. The evaluation process was designed and performed via anonymous online surveys targeting individually ICT (internet and communication technology) departments and healthcare professionals. The study was conducted in 2019 for a health region in Greece, with a significant number of hospitals and health centers, a large hospital in Portugal, and a medical clinic in Romania, with 53.6% and 6.71% response rates for the ICT and healthcare professionals, respectively. Its findings indicate the necessity of establishing individual cybersecurity departments to monitor assets and attitudes while underlying the importance of continuous security awareness training programs. The analysis of our results assists in comprehending the countermeasures, which have been implemented in the healthcare institutions, and consequently enhancing cybersecurity defense, while reducing the risk surface.
近期研究报告称，医院中发现的网络安全漏洞与人员的网络安全意识水平较低有关。这项工作旨在评估来自欧盟中低收入国家的医疗机构的网络安全文化。评估过程是通过针对信息通信技术（ICT，即互联网和通信技术）部门和医疗专业人员的匿名在线调查来设计和实施的。该研究于2019年在希腊的一个健康区域开展，该区域有大量医院和健康中心，同时还在葡萄牙的一家大型医院和罗马尼亚的一家诊所进行了调查，信息通信技术部门和医疗专业人员的回复率分别为53.6%和6.71%。研究结果表明，有必要设立独立的网络安全部门来监控资产和人员态度，同时强调持续安全意识培训计划的重要性。对我们结果的分析有助于理解医疗机构中已实施的应对措施，从而加强网络安全防御，同时降低风险面。
