ENISA expands EU healthcare cybersecurity support with new initiative

ENISA has signed a €6 million agreement with the European Commission to strengthen cybersecurity across Europe’s healthcare sector through new guidance, support services and coordinated capacity-building initiatives.

As part of the EU Health Action Plan, ENISA has published updated procurement guidelines to help healthcare organisations integrate cybersecurity requirements into technology purchasing and supplier management. The guidance covers security considerations throughout the procurement lifecycle and recommends measures tailored to different cyber risks.

The agency is also developing a European Cybersecurity Support Centre for healthcare providers, which will provide tailored resources covering preparedness, detection, incident response and governance. Together, these initiatives aim to promote a more coordinated approach to healthcare cybersecurity across the EU.

The updated procurement guidance and other Health Action Plan measures will be discussed at the upcoming ENISA eHealth Security Conference, reflecting the EU’s growing emphasis on protecting critical healthcare infrastructure from increasingly sophisticated cyber threats.

Why does it matter?

As healthcare becomes increasingly digital, cybersecurity is no longer only an IT issue but a prerequisite for maintaining essential public services. Embedding security requirements into procurement, governance and operational planning can help hospitals reduce disruption, protect sensitive patient data and improve resilience against cyberattacks.

The initiative also reflects a broader shift in EU cybersecurity policy from responding to incidents towards building resilience by design. Combining common guidance, dedicated support services and coordinated governance could help healthcare providers manage cyber risks more consistently across member states.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our chatbot!