Search

Background: According to the legal definition healthcare systems and their components (e.g., hospitals) are part of the critical infrastructure of modern industrial nations. During the last few years hospitals increasingly became targets of cyber attacks causing severe impairment of their operability for weeks or even months. According to the German federal strategy for protection of critical infrastructures (KRITIS strategy), hospitals are obligated to take precautions against potential cyber attacks or other IT incidents., Objective: This article describes the process of planning, execution and results of an advanced table-top exercise which took place in a university hospital in Germany and simulated the first 3 days after a cyber attack causing a total failure of highly critical IT systems., Material and Methods: During a first stage lasting about 8 months IT-dependent processes within the clinical routine were identified and analyzed. Then paper-based and off-line back-up processes and workarounds were developed and department-specific emergency plans were defined. Finally, selected central facilities such as pharmacy, laboratory, radiology, IT and the hospitals crisis management team took part in the actual disaster exercise. Afterwards the participants were asked to evaluate the exercise and the hospitals cyber security using a questionnaire. On this basis the authors visualized the hospital's resilience against cyber incidents and defined short-term, medium-term and long-term needs for action., Results: Of the participants 85% assessed the exercise as beneficial, 97% indicated that they received adequate support during the preparations and 75% had received sufficient information; however, only 34% had the opinion that the hospital's and their own preparedness against critical IT failures were sufficient. Before the exercise took place, IT-specific emergency plans were present only in 1.7% of the hospital facilities but after the exercise in 86.7% of the clinical and technical departments. The highest resilience against cyber attacks was not surprisingly reported by facilities that still work routinely with paper-based or off-line processes, the IT department showed the lowest resilience as it would come to a complete shutdown in cases of a total IT failure., Conclusion: The authors concluded that the planning phase is the most important stage of developing the whole exercise, giving the best opportunity for working out fallback levels and workarounds and through this strengthen the hospitals resilience against cyber attacks and comparable incidents. A meticulous preparedness can minimize the severe effects a total IT failure can cause on patient care, staff and the hospital as a whole., (© 2023. The Author(s).)

Background: The risk of terrorist attacks in the Federal Republic of Germany is present and is currently increasing. Publicly funded acute care hospitals and their owners are involved in disaster control as part of their remit and are responsible for taking comprehensive precautions to ensure their operational capability in the event of disasters. This mandate must also be ensured in the event of terrorist attacks and amok incidents. For this purpose, an optimal cooperation between preclinical and clinical care is indispensable. Aim: Recommended actions for collaboration between nonclinical and clinical planning to manage a mass casualty incident in terrorist life-threatening response situations are presented. Material and methods: The Inter-Hospital Security Conference Baden-Württemberg (IHSC BW) is an association of representatives of acute hospitals in Baden-Württemberg, the Ministry of the Interior, Digitalization and Migration Baden-Württemberg, the Ministry of Social Affairs and Integration Baden-Württemberg, the State Police Headquarters Baden-Württemberg and the Baden-Württemberg Hospital Association. From 2018 to 2020, the IHSC BW developed recommendations for action on cooperation between police, hospitals and non-police emergency response. The recommendations for action were agreed by the group members in 6 working sessions and initialled in two subsequent video conferences. A recommendation was considered adopted when the IHSC BW plenary assembly finally gave its approval with an absolute majority. Results and discussion: Competence-based interface solutions for a smooth cooperation between prehospital and hospital management in the care of patients who have become victims of a terrorist attack are to be demanded. For preliminary planning, the establishment of a local safety conference at the county disaster control authority level with the following participants is recommended: disaster control authority, fire department, regional police headquarters, chief emergency physician, rescue services and disaster control officers of affected clinics. It is recommended to set up a joint command and situation center (CSC), where management personnel from the police, rescue service, fire department and disaster control can meet to organize the handling of the incident jointly, competently and without loss of time. From this CSC, a liaison officer should then provide the clinics with information at regular intervals. Exercises should take place regularly. Cross-organizational exercises are particularly important, and this is one of the tasks of the local safety conference. [ABSTRACT FROM AUTHOR]

Background: There is a risk of terror attacks in the Federal Republic of Germany, which might increase in the future. A timely comprehensive strategy for treatment and care of a large number of casualties helps minimize chaos and improve the outcome of patients. Adequate training is vital for successful implementation of an emergency plan. Therefore, the effectiveness of training should be assessed and evaluated; however, data collection capabilities for training events are extremely limited, so that publications on the topic are almost impossible to find.Objective: This study aimed to collect data from a simulated terrorist attack in order to draw conclusions from a clinical point of view concerning the improvement of preclinical and clinical management, taking interface problems into consideration.Material and Methods: On 19 October 2019 the Ministry of the Interior, Digitalization and Migration of Baden-Württemberg conducted a large-scale simulation of a terrorist attack in the city center of Constance, called the Baden-Württemberg counterterrorism exercise (BWTEX). The simulation included an explosion of a car bomb as well as the use of firearms by terrorists. The large scale of the simulation with the high number of participants in combination with close cooperation between military and civil forces was unprecedented. The police force, the armed forces, civil protection forces, air rescue teams and staff from Constance, Friedrichshafen and Sigmaringen regional hospitals in southwest Germany worked together to treat simulated injuries to victims of the attack. The following parameters were recorded when the injured patients arrived at the hospital: prehospital triage time, prehospital triage score, initial treatment and quality of documentation on site as well as triage time, triage score, injury severity scale (ISS) score based on the specified injury pattern, treatment, and quality of documentation on hospital arrival.Results: Out of a total of 84 "injured patients" 55 were admitted to hospital and 80% were triaged at the scene. Injured patients of triage category 1 (TK1 red: life-threatening injury, immediate treatment) arrived at the hospital 198 ± 50 min after the attack, injured patients of triage category 2 (TK2 yellow: severely injured, urgent treatment) after 131 ± 44 min and injured patients of triage category 3 (TK3 green: slightly injured, non-urgent treatment) arrived after 157 ± 46 min. There was no significant difference in terms of arrival time at the hospital between the triage scores (r = 0.2) or between the ISS scores (r = 0.43). The authors assume that approximately 44% of TK1 patients would have died due to avoidable time delays. Prehospital medical documentation was insufficient in 78% and insufficient in 65% in the hospitals.Conclusion: A mass casualty incident resulting from a terrorist attack differs greatly from a conventional mass casualty incident. The scene of the attack has to be evacuated as quickly as possible, which means that a large number of patients arrive untreated at the nearest hospitals. The setting up of treatment facilities in city centers and areas close to the city seems to be counterproductive because the time delay may result in higher mortality rates of victims. The particularities of mass casualties caused by a terrorist attack have to be incorporated into terrorist attack training. [ABSTRACT FROM AUTHOR]