Six work packages over twenty-four months

Effort and budget management, scheduling and preparation of meetings, monitoring project activities through regular bottom-up reporting, and permanent contact with the Project Officer.

Scheduling, organising and leading technical activities, coordinating development flow and maintaining close dialogue with the Project Coordinator.

Correct management from a legal, ethics and security perspective, including the design and execution of the Data Management Plan.

Quality control of planned actions and schedules, benchmarking of milestones, and control of quality and consistency against technical and contractual aspects.

A complete overview of EU healthcare security aspects, challenges, strategies and guidelines, classified and mapped to the design of the HEALTH-ER framework and services.

Collection of end-user requirements covering technical, operational, regulatory and legal aspects of hospitals, healthcare providers, industry partners, SMEs and medical device manufacturers.

The reference architecture: core SOCaaS components, security solutions and services, and the knowledge and capacity services. Modular, scalable, flexible and interoperable, with open APIs and accessible user interfaces.

Identification of key stakeholders and users, and definition of processes and tools for skills upscaling, training and awareness, mentoring and partnership building.

Identification and analysis of existing security systems and baseline tools inside the pilot hospitals, adjusted and enhanced to connect with the HEALTH-ER platform.

Behavioural models trained per system to deliver an estimated probability of anomalous behaviour, independent of the underlying protocols, data formats or architectures.

A baseline of normal behaviour for users such as doctors, nurses and administrative staff, and for entities such as infusion pumps, EHR systems and IoT devices, with deviation detection.

Structured, practical roadmaps tailored to the operational, financial and regulatory context of each healthcare provider, rather than generic templates.

EU-compliant reporting, CTI sharing and collaborative threat hunting, built on widely accepted standards to ensure interoperability beyond the borders of a single Member State.

The adaptive SOAR, healthcare incident-response and business-continuity playbooks, and the AI situational awareness components, orchestrated into client-specific tenants.

Courses and education programmes, awareness workshops, mentoring and consulting, and a cyber-range training service adjusted to the healthcare sector.

Integration and delivery of the MVP, with preliminary validation of the individual blocks before deployment in the pilots.

Final pilot definition, mapping end-user service requirements against the developed components, and the overall validation methodology and testing protocol.

Testing and validation of the integrated platform against configuration and integration quality, functionality, and protection against security attacks.

Fully operational pilots assessed for performance gains, module and system performance, results against KPIs, lessons learned, and total cost of ownership.

Agile development cycles producing incremental releases informed by a continuous flow of feedback from the validation activities.

The public web portal, leaflets, posters and slides, project branding, social media strategy, media content, newsletters, publications, workshops and events.

Market-oriented analysis, identification of exploitable results, the exploitation strategy and business models based on the Business Model Canvas, and monitoring of IPR issues.

A database of external institutional and domain-focused stakeholders, constant interaction, and engagement with standardisation fora to present and contribute results.