Cyber crisis management exercise for a hospital group

Context

A regional hospital group (GHT) bringing together several health establishments wanted to strengthen its resilience against cyber threats. After being the victim of a cyberattack, the GHT identified the need to test its business continuity plans and improve its cyber crisis management.

Objectifs

• Test the business continuity plans of four critical services (imaging, laboratory, SAMU and a care department);
• Evaluate the GHT’s organizational response to a cyber crisis;
• Improve coordination between the decision-making and operational units of the group’s establishments;
• Identify areas for improvement and strengthen the skills development of the actors involved.

Mission Description

Alcyconie designed and led a cyber-based crisis management exercise involving the crisis units of several GHT establishments and four departments of the GHT support establishment. The exercise, based on a realistic scenario developed with the GHT teams, put the departments concerned under pressure via stimuli impacting the organizational, operational, technical, legal and communication dimensions.

The service was marked by three main phases: the preparation of the exercise, the facilitation and the cold RETEX phase in order to allow the various crisis units to capitalize on the exercise thanks to a tailor-made action plan.

Challenges and specificities

To train in real conditions an actor who has already experienced a cyberattack with the psychological impact that this implies for the members of the crisis unit who have witnessed it.

Alcyconie’s added value expertise

• Training in a closed and 100% secure environment thanks to the availability of the Alcyconie training platform promoting immersion and realism.
• The expertise of Alcyconie consultants and the knowledge of the impacts in the health sector to offer training and exercise scenarios as close as possible to reality.