Norwegian assurance and risk management specialist DNV has introduced the 'Advanced Healthcare Cybersecurity Certification' (AHCC), a global standard for hospital cybersecurity worldwide.
This certification is designed to assist healthcare organisations in identifying and mitigating cybersecurity risks, ensuring the safety and protection of patient data.
Specifically tailored to the healthcare sector, DNV's AHCC addresses the increasing threat of ransomware attacks and data breaches.
The certification evaluates the maturity of an organisation's cybersecurity measures, focusing on a comprehensive security risk management framework that includes automation, cybersecurity, AI, privacy, and the Internet of Medical Things (IoMT).
With cyber threats posing a significant risk to patient safety due to potential data compromises, the AHCC is claimed to deliver a structured programme for hospitals to demonstrate their commitment to the highest security and quality care standards, DNV noted.
The AHCC framework is built on a risk-based approach, integrated within a quality management system, aligning with established medical practices and regulations to ensure patient safety and care.
Hospitals seeking to achieve the AHCC must meet stringent requirements, including the development of cybersecurity risk management processes and ensuring that all personnel are adequately trained and capable of following the required applicable codes, rules, and guidelines.
In addition, the AHCC mandates that hospitals maintain the necessary infrastructure for cybersecurity, such as secure buildings, cloud storage, and process equipment.
Healthcare organisations should ensure that their workspace, hardware, software, mobile devices, and associated utilities conform with AHCC requirements.
Hospitals must also adhere to all relevant patient safety, data privacy, and data security regulations, ensuring transparency and the protection of patient rights.
DNV’s certification also requires AHCC leadership to determine certain quality performance data while also ensuring that they will deliver all of the necessary education to staff members affiliated with the AHCC programme.
DNV SCPA Americas vice-president and regional manager Alex Imperial said: “Our new certification compliments our portfolio of hospital accreditation, certification, and training services aimed at optimising hospital safety and quality of care.
“DNV’s AHCC enables hospitals to demonstrate the maturity and robustness of their cybersecurity programme. A critical differentiator to provide optimal patient care in times of growing cyberattacks.”
