Estonia — Foundation Pärnu Hospital
A healthcare-specific SOC-as-a-Service that puts patient-safety logic into the cybersecurity context.
- licensed beds
- 429licensed beds
- employees
- 1,300employees
- outpatient visits a year
- 238,000outpatient visits a year
- patients reached in peak season
- 300,000patients reached in peak season
The site
Pärnu Hospital is a central healthcare provider serving Pärnu County, Lääne, Saare and Hiiumaa, reaching over 300,000 patients during the summer season. It serves a community of 200,000 citizens, operates 429 licensed beds, treats around 15,000 in-patients annually and conducts approximately 238,000 outpatient visits. With 1,300 employees it is one of the largest employers in the region. Its mission is to ensure high-quality, patient-centred care while maintaining strong innovation and reliability in its digital operations.
Challenges
As healthcare digitalisation accelerates, Pärnu Hospital faces sophisticated cyber threats targeting both IT and medical technologies. Traditional SOC systems fail to integrate clinical and patient-safety perspectives, leading to visibility gaps: they do not understand the context of healthcare and focus purely on the IT perspective. That makes the traditional SOC model outdated, as it can only see parts of the full picture. Risks arising from the combination of healthcare technology, cybersecurity and patient safety are not mapped as they should be.
Objectives
- Evaluate whether the HEALTH-ER framework, tools and services are suitable for the hospital’s needs.
- Assess HEALTH-ER performance, usability and reliability under real-life conditions.
- Implement patient-safety logic into the cybersecurity context.
- Ensure the final deployment complies with relevant data protection and cybersecurity regulations.
Use cases
- 1
Patient-specific SOCaaS service
Continuous monitoring of electronic health record activity and related clinical workflows to detect anomalies, prevent data breaches and ensure compliance with healthcare regulations.
- 2
Medical device protection
The SOC connects with network-connected medical devices, identifying unusual communication patterns and behaviour and responding proactively.
- 3
Medical device supply-chain monitoring
Services focused on monitoring and securing the medical device supply chain, identifying vulnerabilities and ensuring the integrity and traceability of devices throughout their lifecycle.