Model for cyber security information sharing in healthcare sector

In the modern society almost all services are based on data-networks and networked systems. Especially through the growing digitalization an increasing number of services is connected to data-networks. One example of a highly digitalized domain is the healthcare sector, where a cyber-attack could cause extreme circumstances. Decision making requires knowledge about the current situation. Particularly, in the complex domain of cyber security where the boundaries of physical world do not exist, situational awareness has a determinative role. One source for required cyber security information is obtained by sharing information: different organizations share the information between each other. Typically, Cyber security information has classification levels, which affects challenges for information sharing between different organizations. In this study, the model for information sharing between different organizations with different classification levels is developed and tested in the simulation. Because of its importance, the developed model is tested in the simulation of a healthcare domain; however, it can be utilized in all business sectors. In this paper, not only the developed model with simulation results is presented, but also tested in real life scenarios within an existing project