Healthcare facilities that have already suffered data breaches are implementing strengthened technical and organizational measures, but also uncovering gaps in practical implementation.
NIS2 and KRITIS impose varying levels of cybersecurity obligations on healthcare facilities depending on whether they are classified as critical infrastructure and their size.
