Clinical Cybersecurity Training Through Novel High-Fidelity Simulations

Abstract

Background: Cybersecurity risks in health care systems have traditionally been measured in data breaches of protected health information, but compromised medical devices and critical medical infrastructure present risks of disruptions to patient care. The ubiquitous prevalence of connected medical devices and systems may be associated with an increase in these risks.

Objective: This article details the development and execution of three novel high-fidelity clinical simulations designed to teach clinicians to recognize, treat, and prevent patient harm from vulnerable medical devices.

Methods: Clinical simulations were developed that incorporated patient-care scenarios featuring hacked medical devices based on previously researched security vulnerabilities.

Results: Clinicians did not recognize the etiology of simulated patient pathology as being the result of a compromised device.

Conclusions: Simulation can be a useful tool in educating clinicians in this new, critically important patient-safety space.

Keywords: cybersecurity; health care; medical education; simulation.