e-CyberHealth 2022 e-Booklet CyberSecurity 4e-Health Int'l Conference | Page 32

Marco Marsella
Head of Unit eHealth , Well-Being and Ageing CNECT . DDG1 . H . 3 European Commission
Marco Marsella is Head of the “ eHealth , Well-being , and Ageing ” Unit in the Directorate General for Communications Networks , Content and Technology ( DG CONNECT ) of the European Commission .
From 2016 to June 2018 , Marco Marsella was leading the Unit responsible for the Web Accessibility Directive , Safer Internet and Language Technologies .
He has worked on policy development , innovation and research implementation in the areas of digital content , technologies for learning , e-inclusion and assistive technologies .
" Cybersecurity & healthcare : EU Perspective "
• General Policy context for Digital Health The basis for Digital Health general policy is the Communication from the commission COM ( 2018 ) 233 which has 3 main pillars : - Secure access and exchange of health data - Health data pooled for research and personalised medicine - Digital tools and data for citizen empowerment and person-centered healthcare
• Cyber Security in the Healthcare Sector – The following issues were spotted : -Low maturity of cyber security in the healthcare sector and lack of security awareness in the involved stakeholders -Hospitals are easy targets for malicious attackers and relatively more inclined to pay i . e . cases of ransomware attacks in hospitals and health insurance providers , DDoS attack in national ehealth system -Attacks increased since the COVID19 pandemic
• General Policy context for Cybersecurity -Latest EU cybersecurity legislative initiatives : NIS 2 and CRA - The main objectives of the NIS 2 are the following : - 1 . Cover a larger portion of economy and society ( more sectors ) - 2 . Within sectors : systematically focus on bigger and critical players ( replace current identification process ) - 3 . Align security requirements ( incentivize investments and awareness including by mandating board-level accountability ), expand supply chain and supplier relationships risk management - 4 . Streamline incident reporting obligations - 5 . Align provisions on national supervision and enforcement
• Some ongoing projects that might be of interest to you : - Call : DIGITAL-2022-CYBER-02 ( Cybersecurity and Trust ) Topic : DIGITAL-2022-CYBER-02-SUPPORTHEALTH
Support to cybersecurity in the health sector with 7 projects signed - TOPIC HORIZON-HLTH-2022-IND-13-01 - Enhancing cybersecurity of connected medical devices .