NEw MEdical CYbersecurity assessment and design Solutions

欧洲的医疗保健系统正在向个性化、分布式和以家庭为基础的服务发展。通过新的和改进的连接医疗设备（MD）和连接到互联网的体外诊断设备（统称CMD），这将使医疗保健提供者在降低成本（减少医院床位）和改善服务方面受益。通过在家或在他们想要的地方进行治疗，患者将看到生活质量的改善，减少旅行时间和减轻压力。然而，为了充分实现这些益处，需要确保CMD的网络安全。NEMECYS将使网络安全社区、MD制造商、CMD场景系统集成商和CMD场景运营商（例如医疗保健提供者）等从业者受益，并通过有效和简化的网络安全实现更具成本效益和高效的护理，为患者和更广泛的公众带来下游利益。NEMECYS帮助从业者（1）遵守MD法规;（2）能够应用适当的MD网络安全（安全风险暴露太少，太多成本高昂，可能会阻碍临床护理）和（3）通过设计为MD及其操作的连接场景构建网络安全。这是通过以下方式实现的：（1）提供MD网络安全设计的最佳实践和指南建议，沿着合规保证工具;（2）提供风险受益计划，以解决网络安全风险与临床受益的平衡;（3）提供一组特定工具，以解决MD网络安全设计及其在连接场景中的部署。NEMECYS团队拥有网络安全风险专家，两家已经实施物联网和远程护理方案的医院，三家医疗设备制造商，主要的计算机科学研究参与者和经验丰富的系统集成商。该团队是确保NEMECYS能够使从业人员以低成本在正确的地方应用正确的安全性的理想选择。

The European health care system is moving toward personalised, distributed, and home-based services. This is made possible via new and improved connected medical devices (MDs) and in vitro diagnostic devices connected to the internet (together, CMDs), and will benefit health care providers in terms of reduced cost (fewer hospital beds) and improved service. Patients will see improved quality of life in terms of reduced travel time and reduced stress via treatment at home or where they want it. However, for these benefits to be fully realised, the cybersecurity of CMDs needs to be ensured. NEMECYS will benefit practitioners such as cybersecurity communities, MD manufacturers, CMD scenario system integrators and CMD scenario operators (e.g. health care providers), with downstream benefits to patients and the wider public, through more cost-effective and efficient care enabled via effective and streamlined cybersecurity. NEMECYS helps practitioners to (1) comply with MD regulations; (2) to be able to apply proportionate MD cybersecurity (too little security risks exposure, too much is costly and can obstruct clinical care) and (3) build in cybersecurity by design for both MDs and the connected scenarios they operate in. This is achieved by (1) providing recommendations for best practice and guidelines for MD cybersecurity by design, along with compliance assurance tooling; (2) providing a risk-benefit scheme to address cybersecurity risk balanced with clinical benefit; and (3) providing a set of specific tools to address MD cybersecurity by design and their deployment in connected scenarios. The NEMECYS team has cybersecurity risk experts, two hospitals who are already implementing IoT and remote care-based scenarios, three medical device manufacturers, major computer science research players and experienced systems integrators. This team is ideally placed to ensure that NEMECYS can enable practitioners to apply the right security at the right place, at low cost.