No more cyber incidents in health

NoMoreCyberincidentsInHealth (NMCIH) is a European collaborative project focused on structurally strengthening the cyber resilience of healthcare institutions across the EU. The project addresses the entire sector, from small healthcare practices to large academic hospitals.

The initiative supports organizations in preventing cyber incidents, promptly identifying threats, and responding effectively when incidents do occur. 

NMCIH was established by a consortium of six partners actively participating in the European Health ISAC (EH-ISAC). This network, supported by ENISA, provides a trusted environment where healthcare organizations and CSIRTs share knowledge and threat intelligence. Within NMCIH, the EH-ISAC plays a key role in further disseminating and implementing the project’s results across Europe.

The goal is to reduce cyber incidents and minimize their impact on healthcare. In doing so, the project directly contributes to the continuity of care and patient safety. NMCIH aligns with the EU Action Plan for Healthcare and is supported by various European stakeholders, including the European Hospital and Healthcare Federation (HOPE). Thanks to this support, the results can be widely shared within the European healthcare sector. 

The project is executed by the following organizations:

• Assistance Publique - Hôpitaux de Paris
• Brest University Hospital
• Hospices Civils de Lyon
• Danish Health Data Authority
• Hôpital Universitaire de Bruxelles
• Stichting Z-CERT (project lead) 

The NoMoreCyberincidentsInHealth project develops various practical and immediately applicable solutions, including:

• European Healthcare InfoSec Benchmark: A tool for hospitals to compare their cyber resilience
• European Threat Radar: An annual overview of the most significant threats to the healthcare sector
• OpenKAT-Health: A solution for mapping attack surfaces with healthcare-specific detection
• Cyber Alarm: A low-threshold detection solution for smaller healthcare providers
• Clear NDR: Network detection and monitoring tools
• SOC-in-a-Box: A simple-to-implement SOC solution for healthcare institutions
• European Red Teaming Methodology: A standardized approach for testing security
• Attack Emulation Toolkit: Tools to simulate realistic attacks
• European Health Detection Network (HDN): A platform for sharing threat intelligence

A key principle is that these solutions will be available as open-source, ensuring broad accessibility and long-term value for the sector. 

In addition to tool development, the project strongly emphasizes deployment and sharing the knowledge gained. This is achieved through online platforms, newsletters, webinars, and conferences. A Healthcare Stakeholder Group will also be established to further strengthen collaboration with healthcare organizations and accelerate the practical application of project results. 

Through NMCIH, the aim is to create a situation in which healthcare institutions across Europe:

• Demonstrably improve their level of cybersecurity
• Are better equipped to withstand threats such as ransomware
• Can respond faster and more effectively to incidents