Complex operator security of critical infrastructures in healthcare system, with particular regard to the performance of industrial safety tasks

Abstract

In Hungary, the identification and designation of healtcare sector’s critical infrastructures began in 2016, including the inpatient care sub-sector. The act on the identification, designation and protection of critical systems and facilities and its implementing decree requires operators of designated system components to prepare an Operator Security Plan. During the revisions in 2020, a new type of planning and risk assessment methodology was issued. ISO 22301, which describes the design of business continuity management systems, has proven itself in international practice for operator security planning. However, the application of the standard is not typical in this area in our country. In health care sector, the practical application of a profit-oriented approach focusing on the maintenance of "production" and "profit" is not common, and the concepts of profit and production are difficult to interpret. The study examines the application possibilities of business continuity management systems in public healthcare sector.