ENISA Advances EU Healthcare Cybersecurity Plan With Support Mechanism and Procurement Guidelines
Summary
ENISA is implementing a healthcare cybersecurity support mechanism under a three-year, €6 million agreement with the European Commission and has published updated procurement guidelines for hospitals and healthcare providers.
Key points
- The European Commission and ENISA signed a three-year Contribution Agreement worth €6 million to establish a European Cybersecurity Support Mechanism for healthcare providers.
- ENISA will develop a service catalogue covering preparedness, detection, response and governance.
- The mechanism is intended to provide tailored guidance, tools and services to healthcare providers across Europe.
- Updated procurement guidelines cover the procurement lifecycle, supplier cybersecurity requirements and a practical checklist linked to threats across procurement types.
- The guidelines were prepared by ENISA with support from the NIS Cooperation Group, EU Health ISAC and the European Commission.
Article Details
- Event Type
- Implementation of the EU Action Plan for the cybersecurity of hospitals and healthcare providers, including a EUR 6 million, three-year Contribution Agreement and updated cybersecurity procurement guidelines.
- Impact
- The agreement supports a proposed European Cybersecurity Support Centre and a service catalogue covering preparedness, detection, response, and governance. The updated guidelines provide procurement practices, supplier cybersecurity requirements, and a healthcare-focused checklist intended to help hospitals and healthcare providers integrate cybersecurity throughout the procurement lifecycle.
Vendors
ENISAThrough the Action Plan, ENISA has been tasked with a series of actions, underscoring the EU’s confidence in its ability to deliver meaningful value to the sector.EU Health ISAC (EH-ISAC)This publication was prepared by ENISA, with the support of the NIS Cooperation Group, the EU Health ISAC (EH-ISAC) and the European Commission.European CommissionLaunched in 2025 by the European Commission, the EU Action Plan for the cybersecurity of hospitals and healthcare providers was a pivotal step towards enhancing the protection and resilience of the sector.NIS Cooperation GroupThis publication was prepared by ENISA, with the support of the NIS Cooperation Group, the EU Health ISAC (EH-ISAC) and the European Commission.