Cybersecurity in elderly care institutions — challenges and conditions
Cybersecurity in elderly care institutions — challenges and conditions

Summary/Abstract: Introduction: In the era of increasing digitization of the long-term care sector and increased exposure to cyber threats, it is necessary to identify the main risks and barriers in the implementation of effective protective solutions and to provide recommendations for IT system security policies. Objective: The aim of the article is to analyze the key challenges and conditions related to cybersecurity in senior care institutions. Research methodology: A literature review methodology was used, analyzing scientific papers and industry reports (including ENISA, NIST, CERT Polska). The review included both sources from databases and regulatory documents (GDPR, NIS2 Directive). The analysis included guidelines from healthcare institutions, as well as cybersecurity supervisory bodies. Results: Senior care institutions such as: social welfare homes, family care homes, nursing and treatment facilities and nursing and care facilities, multifunctional social service centers are particularly vulnerable to cyberattacks. The most common attacks include: ransomware attacks (e.g. blocking electronic medical records systems); leaks of sensitive data (resulting from, among others, improper configuration of cloud computing); phishing aimed at staff (due to low level of digital awareness). Conclusions: The main factors increasing the risk of cyberattacks in senior care institutions are: underfunding of IT, lack of specialized staff and fragmented implementation of standards. Based on the literature review, it can be assumed that institutions using regular security audits, employee training and cooperation with CSIRT should record a smaller number of effective attacks. It is necessary to develop a sectoral cybersecurity standard for senior care institutions, considering: strengthening legal requirements regarding the protection of critical infrastructure; introducing mandatory educational programs for staff; creating mechanisms for financing the modernization of IT systems (e.g. within the framework of EU funds). The importance of intersectoral coordination is also increasing, e.g. through platforms for exchanging information on threats. Close cooperation with supervisory authorities and the use of cloud solutions with advanced encryption mechanisms is therefore recommended.

• Details
• Contents