HEALTH-ER
AI-based cybersecurity framework for enhancing the resilience of hospitals and healthcare providers
HEALTH-ER directly addresses the objectives of the call DIGITAL-ECCC-2025-DEPLOY-CYBER-08, introducing a significant shift in approach to cybersecurity in the healthcare sector. The project moves beyond traditional IT-centric security models, which are often insufficient for the specific needs of clinical environments.
Detailed project description
The project will develop an innovative cybersecurity framework, leveraging AI-based tools and services, aimed at protecting hospitals and healthcare providers across the European Union. The framework will strengthen preparedness, cyber resilience, as well as training and awareness among involved stakeholders.
At its core, it will include an AI-driven Security Operations Centre-as-a-Service (SOCaaS), which will orchestrate multiple AI-based security components and interconnect with a wide range of preparedness and assessment services.
The framework is designed to strengthen resilience across the full spectrum of European hospitals and healthcare providers, transforming cybersecurity from a reactive process into a proactive, intelligent, and clinically adapted resilience strategy. The HEALTH-ER consortium consists of thirteen (13) organisations from seven (7) Member States and is coordinated by OSI, a partner with extensive expertise in the field of cybersecurity.
Type and scope of work provided
HEALTH-ER develops an innovative cybersecurity framework designed to transform the protection of healthcare services in the EU from reactive IT security into proactive, AI-driven resilience. Its scope covers the full cybersecurity lifecycle, prevention, detection, response, and recovery, specifically tailored to the needs of clinical environments.
- Assessment and design: establishment of a baseline for digital maturity in EU hospitals, mapping of common needs, and development of technical implementation roadmaps, aligned with the NIS2 Directive and the EU Artificial Intelligence Act.
- AI orchestration: development of an AI-based Security Operations Centre-as-a-Service (SOCaaS) that orchestrates multiple cybersecurity components and makes advanced protection accessible to both large hospitals and smaller clinics.
- Validation and resilience: implementation of pilot deployments, penetration testing, and business continuity exercises to ensure uninterrupted healthcare service delivery during cyber incidents.
- Data governance and ethics: implementation of privacy-by-design principles and decentralized AI training, aimed at protecting sensitive data while ensuring human oversight and accountability.
- Capacity building: provision of specialized training and awareness workshops to improve “cyber hygiene” and prepare healthcare staff for evolving threats.
