HSCC Publishes Cyber Incident Response Playbook for Medical Product Manufacturers
To help small- and medium-sized manufacturers of medical products develop effective incident response plans, the Health Sector Coordinating Council Cybersecurity (HSCC) Manufacturing Operational Technology Cybersecurity Task Group has developed a cyber incident response playbook specifically for medical product manufacturers.
In the event of a security incident such as a ransomware attack, it will only be possible to respond efficiently and effectively if a comprehensive incident response plan has been developed and implemented. The incident response plan should cover different types of cyber incidents and specify the procedures and processes that should be followed for response, recovery, and post-incident analysis. As part of the incident response plan, a cyber incident response team (CIRT) should be established and trained on the incident response plan, and tabletop exercises should be conducted to ensure everyone knows what needs to be done and to identify and correct any flaws in the plan.
An effective cyber incident response plan is not only concerned with the reactionary steps following a security incident such as containment and eradication. Procedures also need to be developed for detecting incidents, generating alerts, escalation, and the declaration of a cyber incident, as well as recovery and post-incident actions such as documenting the response and the lessons learned and feeding that information back to the preparation stage of the response phase cycle to make improvements for responding to future incidents.
The HSCC Medical Product Manufacturer Cyber Incident Response Playbook (MPM CIRP) serves as introductory guidance to help medical product manufacturers develop effective cyber incident response plans. The document covers the steps that should be taken to prepare for incidents and the related disruptions, the processes and procedures associated with response and recovery, and the industry and government partners that can be engaged during an incident to provide assistance and coordinate messaging for incidents that require communication with customers and the public. The step-by-step guide has been developed for medical product manufacturers of all sizes and can be adapted and tailored to create internal playbooks for their specific circumstances.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
