OFFICIAL REFERENCE
NIS2 Directive (EU) 2022/2555
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
RESOURCES & REFERENCES
Prepare with the
right information.
Practical material for provider groups, outpatient clinics, laboratories and digital health platforms.
Start with primary sources.
OFFICIAL REFERENCE
GDPR: Regulation (EU) 2016/679
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
HHS: HIPAA Security Rule and guidance
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
European healthcare cybersecurity action plan
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
OWASP API Security Top 10
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
OFFICIAL REFERENCE
NIST SP 800-115: security testing and assessment
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
Practical sector guides
Planning5 min read
How to scope a healthcare penetration test
Build the scope around patient-data journeys, identities and integrations, not an asset count alone.
Read the perspective
Delivery5 min read
Testing patient portal authorisation beyond login
Use synthetic patients and role pairs to test who can see, export and change each record.
Read the perspectiveRequirements5 min read
What healthcare testing can contribute to NIS2 evidence
Connect technical findings to risk ownership while keeping legal applicability and audit conclusions separate.
Read the perspective