NEw MEdical CYbersecurity assessment and design Solutions

欧洲医疗保健系统正朝着个性化、分布式和基于家庭的服务方向发展。这是通过新的和改进的联网医疗设备(MD)和连接到互联网的体外诊断设备(统称为CMD)实现的，并将在降低成本(更少的医院床位)和改善服务方面使卫生保健提供者受益。通过在家中或在他们想要的地方进行治疗，患者将在减少旅行时间和减轻压力方面看到生活质量的改善。然而，为了充分实现这些好处，需要确保CMD的网络安全。NEMECYS将使网络安全社区、MD制造商、CMD场景系统集成商和CMD场景运营商(例如医疗保健提供者)等从业者受益，通过有效和简化的网络安全实现更具成本效益和效率的护理，为患者和更广泛的公众带来下游好处。NEMECYS帮助从业者(1)遵守MD法规；(2)能够应用成比例的MD网络安全(暴露的安全风险太少，成本太高，可能会阻碍临床护理)，以及(3)通过为MD及其操作所在的互联场景设计内置的网络安全。这是通过以下方式实现的：(1)通过设计为MD网络安全提供最佳实践和指南的建议，以及合规保证工具；(2)提供风险-收益方案，以平衡网络安全风险和临床利益；以及(3)通过设计提供一套特定工具来解决MD网络安全问题，并将其部署在互联场景中。NEMECYS团队拥有网络安全风险专家、两家已经在实施物联网和基于远程护理的场景的医院、三家医疗设备制造商、主要的计算机科学研究机构和经验丰富的系统集成商。该团队是确保NEMECYS能够使从业者能够以低成本在正确的地点应用正确的安全措施的理想位置。

The European health care system is moving toward personalised, distributed, and home-based services. This is made possible via new and improved connected medical devices (MDs) and in vitro diagnostic devices connected to the internet (together, CMDs), and will benefit health care providers in terms of reduced cost (fewer hospital beds) and improved service. Patients will see improved quality of life in terms of reduced travel time and reduced stress via treatment at home or where they want it. However, for these benefits to be fully realised, the cybersecurity of CMDs needs to be ensured. NEMECYS will benefit practitioners such as cybersecurity communities, MD manufacturers, CMD scenario system integrators and CMD scenario operators (e.g. health care providers), with downstream benefits to patients and the wider public, through more cost-effective and efficient care enabled via effective and streamlined cybersecurity. NEMECYS helps practitioners to (1) comply with MD regulations; (2) to be able to apply proportionate MD cybersecurity (too little security risks exposure, too much is costly and can obstruct clinical care) and (3) build in cybersecurity by design for both MDs and the connected scenarios they operate in. This is achieved by (1) providing recommendations for best practice and guidelines for MD cybersecurity by design, along with compliance assurance tooling; (2) providing a risk-benefit scheme to address cybersecurity risk balanced with clinical benefit; and (3) providing a set of specific tools to address MD cybersecurity by design and their deployment in connected scenarios. The NEMECYS team has cybersecurity risk experts, two hospitals who are already implementing IoT and remote care-based scenarios, three medical device manufacturers, major computer science research players and experienced systems integrators. This team is ideally placed to ensure that NEMECYS can enable practitioners to apply the right security at the right place, at low cost.