--- title: "ECSO: Cybersecurity in Healthcare - Key Takeaways" description: Healthcare is one of the most targeted sectors for cyberattacks, yet cybersecurity remains an afterthought across much of the industry. Our Cyber Security Specialist, Marcello Carboni, summarises key findings and proposed solutions from ECSO's recent healthcare cybersecurity webinar. image: https://8west.ie/hubfs/8-west-consulting-cybersecturity-in-healthcare.jpg --- [![Navigate to: 8 West Consulting website Homepage](https://8west.ie/hubfs/SEO_optimized_media/8_west_logo.webp)](https://8west.ie/) [![8 West Consulting: leftward chevron icon](https://8west.ie/hubfs/SEO_optimized_media/8-West-Consulting-leftward-chevron-icon.png) Back to main insights page](https://8west.ie/insights) ## ARTICLE # ECSO: Cybersecurity in Healthcare - Key Takeaways security health insurtech Healthcare is one of the most targeted sectors for cyberattacks, yet cybersecurity remains an afterthought across much of the industry. Our Cyber Security Specialist, Marcello Carboni, summarises key findings and proposed solutions from ECSO's recent healthcare cybersecurity webinar. ![ECSO: Cybersecurity in Healthcare - Key Takeaways](https://8west.ie/hubfs/8-west-consulting-cybersecturity-in-healthcare.jpg) ![Avatar picture of the author: Marcello Carboni](https://8west.ie/hubfs/8-West-Consulting-member-Marcello-Carboni.png) ### Marcello Carboni #### Cyber Security Specialist, 8 West Consulting SHARE ON [![Click to share this article on Linkedin](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-linkedin.png)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2F8west.ie%2Finsights%2Fecso-cybersecurity-in-healthcare-key-takeaways) February 12, 2025 The [European Cyber Security Organisation (ECSO)](https://ecs-org.eu/), in collaboration with its members and the [ECSO Chief Information Security Officers (CISO) Community](https://ecs-org.eu/cyber-resilience-of-economy-infrastructure-and-services/ecso-ciso-community/) from the healthcare sector, has been gathering insights into the sector's current challenges across the EU and exploring potential solutions. These findings were recently discussed at ECSO’s "[Cybersecurity in Healthcare: Insights from Security Professionals](https://ecs-org.eu/?publications=cybersecurity-in-healthcare-insights-from-security-professionals)" webinar. The EU is developing an [action plan](https://digital-strategy.ec.europa.eu/en/library/european-action-plan-cybersecurity-hospitals-and-healthcare-providers) to emphasise the need for up-to-date cybersecurity in hospitals and healthcare providers, with a strategy that will be introduced during the first 100 days of Ursula von der Leyen mandate. In response, ECSO decided to collect inputs from its members regarding the main challenges in this sector and their solutions, along with a complexity level and their criticality.   The main constraint present in this sector is budget, making securing digital infrastructure and ensuring privacy increasingly difficult. Collaboration between public administration, healthcare professionals and business are essential to improve security.   Despite the current policy initiatives, such as the NIS2 directive, the Cyber Resilience Act and the GDPR, the healthcare sector remains a frequent target of cyberattacks and its cybersecurity maturity is still insufficient to protect critical infrastructure.   Insights from security professionals reveal that in the healthcare sector, especially in hospitals and healthcare providers, IT and security are still an afterthought, despite them being foundational for modern healthcare delivery. The lack of integrated cybersecurity in medical product development, reliance on legacy systems and difficulty in managing supply chain risks further increases the sector's vulnerabilities. Additionally, difficulties in attracting and retaining skilled cybersecurity talent, along budget constraints, further hinder the progress in addressing these issues.   To address those challenges, several solutions are proposed:   - Direct funding or fiscal incentives should be provided to healthcare organizations to ensure security without hindering patient care. - Centralised IT infrastructure, secure cloud services and public-private partnerships should be developed to improve cybersecurity resources, and incident response support should be provided at European level (e.g., European Healthcare CSIRT; Cyber Reserves). - Political initiatives and targeted awareness campaigns can raise the priority of IT and cybersecurity in healthcare organisations, while upper management must be held accountable for a proper risk management process. - Healthcare requires a unique cybersecurity framework, with streamlined standards and unified risk assessment to identify systemic risks and prioritise resource allocation. Sector-specific Cyber Threat Intelligence products and vulnerability monitoring should be implemented. Stronger security requirements for medical devices and their supply chain can ensure manufacturers meet the cybersecurity standards. A risk-based approach should be adopted to secure legacy systems and critical infrastructure, with public-private partnerships to alleviate the staff shortages.   In conclusion, healthcare's cybersecurity is a complex issue that requires a coordinated approach. More attention should be given to alleviate budget constraints, secure the supply chain and develop secure technology.   **For more information, visit**: [https://ecs-org.eu/?publications=cybersecurity-in-healthcare-insights-from-security-professionals](https://ecs-org.eu/?publications=cybersecurity-in-healthcare-insights-from-security-professionals)   Enjoyed this article? Follow Marcello Carboni for more insights and commentary on: [![Social Icon: Linkedin](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-linkedin.png) LINKEDIN](https://www.linkedin.com/in/marcello-carboni-b01228186) [Security and Regulatory Compliance Services](https://8west.ie/services/security) [BOOK A SCOPING CALL](https://8west.ie/about-us/contact-us) [![8 West Consulting: chevron icon](https://8west.ie/hubfs/SEO_optimized_media/8-West-Consulting-leftward-chevron-icon.png) ALL POSTS](https://8west.ie/insights) [NEXT ARTICLE ![8 West Consulting: chevron icon](https://8west.ie/hubfs/SEO_optimized_media/8-West-Consulting-leftward-chevron-icon.png)](https://8west.ie/insights/redefining-online-retail-with-ai) ## RELATED CONTENT ![I have not typed code for months. Here is how it feels.](https://8west.ie/hubfs/8%20West%20Consulting%20-%20Article%20-%20Janos%20Farkas%20-%20I%20have%20not%20typed%20code%20for%20months.%20Here%20is%20how%20it%20feels.png) #### ARTICLE [I have not typed code for months. Here is how it feels.](https://8west.ie/insights/i-have-not-typed-code-for-months.-here-is-how-it-feels) ![Why Agentforce Stalls Inside Health & Dental Payers (and the Foundation That Fixes It)](https://8west.ie/hubfs/8%20West%20consulting%20-%20Article%20-%20Why%20Agentforce%20Stalls.png) #### ARTICLE [Why Agentforce Stalls Inside Health & Dental Payers (and the Foundation That Fixes It)](https://8west.ie/insights/why-agentforce-stalls-inside-health-dental-payers-and-the-foundation-that-fixes-it) 8 West Consulting © 2026 [Privacy Policy](https://8west.ie/privacy) [Sitemap](https://8west.ie/sitemap) [![Navigate to: 8 West Consulting Facebook page](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-facebook.png)](https://www.facebook.com/8westconsulting/) [![Navigate to: 8 West Consultng Youtube Channel](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-youtube-white.png)](https://www.youtube.com/@8westconsulting) [![Navigate to: 8 West Consulting Instagram business profile](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-instagram.png)](https://www.instagram.com/8westconsulting/) [![Navigate to: 8 West Consulting LinkedIn business profile](https://8west.ie/hubfs/SEO_optimized_media/8-west-Consulting-icon-logo-linkedin.png)](https://www.linkedin.com/company/8-west-consulting) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Marcello Carboni", "url" : "https://8west.ie/insights/author/marcello-carboni" }, "dateModified" : "2026-06-12T13:42:11.464Z", "datePublished" : "2025-02-12T11:00:00.000Z", "headline" : "ECSO: Cybersecurity in Healthcare - Key Takeaways", "image" : [ "https://8west.ie/hubfs/8-west-consulting-cybersecturity-in-healthcare.jpg" ], "mainEntityOfPage" : { "@id" : "https://8west.ie/insights/ecso-cybersecurity-in-healthcare-key-takeaways", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://8west.ie/hubfs/Imported%20images/logos/8West.png" }, "name" : "8 West Consulting" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://8west.ie/#organization", "@type" : "Organization", "areaServed" : [ "Europe", "United States", "Global" ], "contactPoint" : [ { "@type" : "ContactPoint", "availableLanguage" : [ "English" ], "contactType" : "sales", "email" : "info@8west.ie" }, { "@type" : "ContactPoint", "areaServed" : "IE", "contactType" : "sales", "telephone" : "+353 21 4925100" }, { "@type" : "ContactPoint", "areaServed" : "IE", "contactType" : "support", "telephone" : "+353 21 4925155" } ], "description" : "8 West Consulting is an ISO 27001-certified software partner delivering enterprise systems for complex, regulated Health InsurTech and ecommerce environments.", "knowsAbout" : [ "Software development", "Cloud engineering", "Data engineering", "Artificial intelligence", "Dev Ops", "Cybersecurity", "Ecommerce", "Health insurance technology (Health Insurtech)", "Digital marketing" ], "logo" : { "@type" : "ImageObject", "url" : "https://145696986.fs1.hubspotusercontent-eu1.net/hubfs/145696986/SEO_optimized_media/8-West-Consulting-Logo-250x250.png" }, "name" : "8 West Consulting", "sameAs" : [ "https://www.facebook.com/8westconsulting", "https://www.youtube.com/@8westconsulting", "https://ie.linkedin.com/company/8-west-consulting", "https://www.instagram.com/8westconsulting/" ], "url" : "https://8west.ie/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://8west.ie/#website", "@type" : "WebSite", "name" : "8 West Consulting", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://8west.ie//search?q={search_term_string}" }, "publisher" : { "@id" : "https://8west.ie/#organization" }, "url" : "https://8west.ie/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://8west.ie/insights#1002", "@type" : "WebPage", "about" : { "@id" : "https://8west.ie/#organization" }, "description" : "This page collects the original articles, webinars, and white papers produced and published by the members of 8 West Consulting.", "isPartOf" : { "@id" : "https://8west.ie/#website" }, "name" : "Insights | 8 West Consulting", "url" : "https://8west.ie/insights" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://8west.ie/", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://8west.ie/insights", "name" : "Insights", "position" : 2 } ] } ```