[Interprofessional recommendations on behalf of Société française de radiothérapie oncologique for the prevention, protection and management of cyberattacks in radiation oncology]

Cybersecurity is currently a major issue. Large hospitals are no longer the only main targets of attacks, but all healthcare organizations and establishments, without distinction of size or activities. The information system is defined as all the resources needed to collect images, store and process them with general distribution of multiple information within an organization. Systems are therefore crucial for the functioning of a medical department. Radiation oncology is one of the specialties most dependent on digital resources, for imaging, data transfer, dosimetry, treatment and so on.. Radiation oncology departments are therefore a prime target for ransomware attacks, which have increased significantly in recent years. Cybersecurity can be likened to a viral or bacterial attack. It is based on the two usual pillars of antimicrobial protection : hygiene and prophylaxis. In this article, we will detail by analogy the three classic levels of prevention of a bacillary attack: "primary prevention", which acts upstream of the infection; "secondary prevention", which acts at an early stage of its evolution; and "tertiary prevention", which acts on complications and risks of recurrence. This article is the result of an interprofessional group on behalf of SFRO, the French society of radiation oncology, with the aim of helping all teams to implement safety adapted to the specificities of a radiation oncology department in France.

[Cyberattack at Dax hospital: Presentation of the facts, consequences and feedback]

Cybersecurity is a major issue in today's world. Health structures are not immune to attacks aimed at stealing valuable sensitive data, demanding a ransom, disrupting or paralyzing a system for political purposes. The Dax Hospital Center (France) had to deal with such an attack in February 2021, bringing the entire computer system to its knees. Radiotherapy, a highly technological specialty and dependent on computers, is a very sensitive sector: unlike other specialties, computer malfunctions prevent any treatment of patients. Faced with this threat which is a reality and of which we bring here a testimony based on our experience, it is important to reflect on the human and technological means in cooperation with the IT specialists to reduce this risk as much as possible but also to be able in the event of an attack to reconstruct the system as quickly as possible and ensure continuity of care.