{"id":3849,"date":"2025-11-25T15:12:17","date_gmt":"2025-11-25T15:12:17","guid":{"rendered":"https:\/\/phishia.fr\/?p=3849"},"modified":"2025-12-11T01:07:00","modified_gmt":"2025-12-11T01:07:00","slug":"organizing-a-cyber-crisis-management-exercise-for-the-hospital","status":"publish","type":"post","link":"https:\/\/phishia.fr\/en\/blog\/incident-response\/organizing-a-cyber-crisis-management-exercise-for-the-hospital\/","title":{"rendered":"Organize a cyber crisis management exercise for the hospital"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"3849\" class=\"elementor elementor-3849\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4e20e1c e-flex e-con-boxed e-con e-parent\" data-id=\"4e20e1c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4c4c158 elementor-widget elementor-widget-text-editor\" data-id=\"4c4c158\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Operating theatre paralysed, HIS unavailable, emergency departments overloaded, calls from the media and ARS in quick succession...<br \/>This is what more and more\u00a0<strong>CHU, hospital centers and GHT<\/strong>\u00a0during major computer attacks.<\/p><p>Plans, procedures and BCP\/ERP are indispensable, but on the day a crisis erupts, one question dominates:<br \/><strong>\u00a0 \u00a0Have the teams ever experienced this type of situation, even \u201cfor real\u201d?<\/strong><\/p><p>This is exactly the role of a\u00a0<strong>cyber crisis management exercise at the hospital<\/strong>\u00a0:<br \/>make a realistic crisis happen, in a safe environment, so that the next one is no longer a discovery.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b8da83c e-flex e-con-boxed e-con e-parent\" data-id=\"b8da83c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c51dfad elementor-widget elementor-widget-heading\" data-id=\"c51dfad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why is a crisis management exercise essential for a hospital?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-471fac4 e-flex e-con-boxed e-con e-parent\" data-id=\"471fac4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8822d4d elementor-widget elementor-widget-text-editor\" data-id=\"8822d4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Better coordination of players in tense situations<\/strong><\/p><p>Management, IT, CISO, care management, department heads, DIM, communications, biomedical, logistics...<br \/>In normal times, everyone knows their perimeter. In a crisis,\u00a0<strong>everyone at the same table<\/strong>.<\/p><p>An exercise to test the\u00a0<strong>responsiveness<\/strong> of the crisis unit, clarify <strong>who decides<\/strong> of what, <strong>streamline exchanges<\/strong> between business and IT.<\/p><p><strong>Validate plans and gradient modes : <\/strong><\/p><p>A white plan, a BCP\/ERP or cyber procedures are only as good as their implementation. <strong>known<\/strong>, <strong>including<\/strong>, applicable\u00a0<strong>under stress<\/strong>.<\/p><p>This exercise highlights the <strong>reflex cards not found<\/strong>, the <strong>obsolete numbers<\/strong> as well as <strong>impracticable degraded modes<\/strong> in a care unit.<\/p><p><strong>Reduce the impact of a real attack<\/strong><\/p><p>Having trained, the teams take on more <strong>quickly<\/strong> the right decisions, which makes it easier to maintain care in degraded mode and limit <strong>medical consequences<\/strong>, and media impact of an attack on the hospital.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-14ca239 e-flex e-con-boxed e-con e-parent\" data-id=\"14ca239\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0f669c9 elementor-widget elementor-widget-heading\" data-id=\"0f669c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The Phishia approach, designed for hospitals<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b9332ef e-flex e-con-boxed e-con e-parent\" data-id=\"b9332ef\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3c46424 elementor-widget elementor-widget-text-editor\" data-id=\"3c46424\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Phishia has structured its exercises around\u00a0<strong>four phases<\/strong>, adapted to the hospital context (CHU, CH, GHT).<\/p><p>\u00a0<\/p><p><strong>Phase 1 - Framing and exercise design<\/strong><\/p><p>Objective: define an exercise that is useful, realistic and aligned with the company's challenges.<\/p><p><strong><span style=\"background-color: transparent;\">Setting up a\u00a0<\/span>project group<\/strong><span style=\"background-color: transparent;\"><strong>\u00a0:<\/strong> management, DSI\/RSSI, care management, quality\/risk management, communication, etc.<\/span><\/p><p><strong><span style=\"background-color: transparent;\">Definition of\u00a0<\/span>objectives<span style=\"background-color: transparent;\">\u00a0:<\/span><\/strong><\/p><ul><li style=\"list-style-type: none;\"><ul><li>test the management of ransomware encrypting the HIS,<\/li><li>experience the transition to downgraded emergency mode,<\/li><li>validate communication with ARS and the media, etc.<\/li><\/ul><\/li><\/ul><div>\u00a0<\/div><div><strong><span style=\"background-color: transparent;\">Definition of\u00a0<\/span>perimeter<\/strong><span style=\"background-color: transparent;\"><strong>\u00a0:<\/strong> isolated establishment or GHT, departments involved, duration of exercise.<\/span><\/div><div><span style=\"background-color: transparent;\">\u00a0<\/span><\/div><p>During this phase, Phishia provides feedback on incidents actually encountered in hospitals, to propose a credible scenario that is neither too simple nor paralyzing.<\/p><p>\u00a0<\/p><p data-start=\"0\" data-end=\"53\"><strong data-start=\"0\" data-end=\"53\">Phase 2 - Preparing the script and media<\/strong><\/p><p data-start=\"55\" data-end=\"123\"><em>Objective:<\/em> build an immersive but totally controlled crisis.<\/p><p data-start=\"125\" data-end=\"454\">First, we write a <strong data-start=\"151\" data-end=\"172\">coherent scenario<\/strong> (e.g. targeted phishing \u2192 account compromise \u2192 encryption \u2192 impact on critical services), then we prepare the main <strong data-start=\"317\" data-end=\"333\">\u201cinjections\u201d<\/strong> These include fictitious e-mails (from management, ARS, press, patients), a few simulated calls and messages from service providers or hosts.<\/p><p data-start=\"456\" data-end=\"581\">Finally, we produce <strong data-start=\"482\" data-end=\"505\">essential media<\/strong> A guide for players, instructions for instructors and an observation grid.<\/p><p data-start=\"583\" data-end=\"719\">Everything is prepared so that, on D-day, the exercise can be carried out without affecting the production IS: <strong data-start=\"678\" data-end=\"718\">zero technical risk for the hospital<\/strong>.<\/p><p data-start=\"583\" data-end=\"719\">\u00a0<\/p><p><strong>Phase 3 - Conducting the exercise with the hospital crisis unit<\/strong><\/p><p>Objective: to put the crisis unit in conditions as close as possible to a real attack.<\/p><p><strong>The roles :<\/strong><\/p><ul><li><strong>Players :\u00a0<\/strong><\/li><\/ul><p>General management, medical management, care management, IT department, CISO, DIM, communication, critical services, etc.<\/p><p>They receive information as it comes in, and make decisions as they would in a real-life situation.<\/p><div>\u00a0<\/div><ul><li><strong>Phishia animators :<\/strong><\/li><\/ul><p>External stakeholders: ARS, ANSSI, CERT, service providers, journalists, patients, etc.<\/p><p>Control the sequence, adjust the pace, inject information at the right moment.<\/p><ul><li><strong>Observers :<\/strong><\/li><\/ul><p>Note reactions, blockages, best practices.<\/p><p>Not involved in decision-making.<\/p><div>\u00a0<\/div><p><strong>How it works :<\/strong><\/p><ol><li>Creation of a\u00a0<strong>crisis unit<\/strong>\u00a0(room, tools, reports).<\/li><li><strong>Launching the scenario :<\/strong> early warning signals, technical alerts, clinical calls...<\/li><li><strong>Gradual pressure build-up :<\/strong> teams have to decide on the switchover to degraded mode, make medical trade-offs, prioritize the applications to be restored, and orchestrate internal and external communications.<\/li><\/ol><p>Throughout the session, Phishia moderators set the pace for the crisis, and observers keep a neutral record of what actually happens.<\/p><p>\u00a0<\/p><p><strong>Phase 4 - Feedback and improvement plan<\/strong><\/p><p data-start=\"58\" data-end=\"229\">We start with a <strong data-start=\"77\" data-end=\"99\">hot debriefing<\/strong> to gather feedback from participants: what worked well, what didn't, and the main sticking points.<\/p><p data-start=\"231\" data-end=\"622\">Then Phishia leads a <strong data-start=\"253\" data-end=\"272\">cold analysis<\/strong> the process (crisis unit, decisions, coordination, downgraded mode) in relation to national best practices. This analysis results in a <strong data-start=\"412\" data-end=\"438\">prioritized action plan<\/strong> These include updating procedures, BCP and white plans, improving directories and reflex cards, and reinforcing team preparation (awareness-raising, targeted training).<\/p><p>The objective is clear:\u00a0<strong>after exercise, your hospital is significantly better prepared than before.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c22e449 e-flex e-con-boxed e-con e-parent\" data-id=\"c22e449\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e3fda5 elementor-widget elementor-widget-heading\" data-id=\"5e3fda5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Phishia can do for your hospital<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e9e4581 e-flex e-con-boxed e-con e-parent\" data-id=\"e9e4581\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a878a7f elementor-widget elementor-widget-text-editor\" data-id=\"a878a7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>A field view of cyber-hospital crises<\/strong><br \/>Our scenarios are based on real-life feedback from the healthcare sector.<\/p><p><strong>Multidisciplinary approach<\/strong><br \/>We involve caregivers and management as much as the IT\/IS department: the crisis is not just a technical issue.<\/p><p><strong>Pedagogy and safety<\/strong><br \/>It's a challenging exercise, but one that takes place in a secure environment, with no risk to the IS or to ongoing care.<\/p><p><strong>Link with your other projects<\/strong><br \/>The lessons learned will feed directly into your work on BCP\/ERP, incident response, the CaRE program, awareness-raising, and so on.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9848bb7 e-flex e-con-boxed e-con e-parent\" data-id=\"9848bb7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-58ae049 elementor-widget elementor-widget-heading\" data-id=\"58ae049\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Want to test your crisis unit before the next attack?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8654776 e-flex e-con-boxed e-con e-parent\" data-id=\"8654776\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-31460db elementor-widget elementor-widget-text-editor\" data-id=\"31460db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A well-constructed exercise takes just a few hours to complete...<br \/>But the day the real crisis arrives,\u00a0<strong>these hours can make all the difference<\/strong>\u00a0between an overburdened hospital and a hospital in control.<\/p><p>You would like to :<\/p><ul><li>organize your hospital's first cyber crisis exercise<\/li><li>professionalizing an existing crisis unit<\/li><li>build a GHT-wide annual exercise program\u00a0<\/li><\/ul><p>Phishia can work with you to design a scenario tailored to your size, organization and maturity level.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Operating theatres paralyzed, HIS unavailable, emergency departments overloaded, calls from the media and ARS one after the other... This is what more and more university hospitals, hospital centers and GHTs are experiencing during major IT attacks. Plans, procedures and PCA\/PRA are essential, but on the day the crisis erupts, one question dominates: have the teams already experienced this type of [...]<\/p>","protected":false},"author":3,"featured_media":3902,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[25],"tags":[28],"class_list":["post-3849","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-reponse-aux-incidents","tag-sante"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital - Phishia<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/phishia.fr\/en\/blog\/incident-response\/organizing-a-cyber-crisis-management-exercise-for-the-hospital\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital - Phishia\" \/>\n<meta property=\"og:description\" content=\"Bloc op\u00e9ratoire paralys\u00e9, SIH indisponible, urgences satur\u00e9es, appels des m\u00e9dias et de l\u2019ARS qui s\u2019encha\u00eenent\u2026C\u2019est ce que vivent de plus en plus de\u00a0CHU, centres hospitaliers et GHT\u00a0lors d\u2019attaques informatiques majeures. Plans, proc\u00e9dures et PCA\/PRA sont indispensables, mais le jour o\u00f9 la crise \u00e9clate, une question domine :\u00a0 \u00a0Les \u00e9quipes ont-elles d\u00e9j\u00e0 v\u00e9cu ce type de [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/phishia.fr\/en\/blog\/incident-response\/organizing-a-cyber-crisis-management-exercise-for-the-hospital\/\" \/>\n<meta property=\"og:site_name\" content=\"Phishia\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-25T15:12:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-11T01:07:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere-1024x576.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/\"},\"author\":{\"name\":\"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/#\\\/schema\\\/person\\\/ab1f38ad06f750da69863e8f06e86528\"},\"headline\":\"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital\",\"datePublished\":\"2025-11-25T15:12:17+00:00\",\"dateModified\":\"2025-12-11T01:07:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/\"},\"wordCount\":1123,\"publisher\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png\",\"keywords\":[\"Sant\u00e9\"],\"articleSection\":[\"R\u00e9ponse aux incidents\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/\",\"url\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/\",\"name\":\"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital - Phishia\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png\",\"datePublished\":\"2025-11-25T15:12:17+00:00\",\"dateModified\":\"2025-12-11T01:07:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#primaryimage\",\"url\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png\",\"contentUrl\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png\",\"width\":2560,\"height\":1440},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/reponse-aux-incidents\\\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/phishia.fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"R\u00e9ponse aux incidents\",\"item\":\"https:\\\/\\\/phishia.fr\\\/blog\\\/category\\\/reponse-aux-incidents\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/#website\",\"url\":\"https:\\\/\\\/phishia.fr\\\/\",\"name\":\"Phishia\",\"description\":\"Cabinet de Conseil IT, Cybers\u00e9curit\u00e9, Durabilit\u00e9\",\"publisher\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/phishia.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/#organization\",\"name\":\"Phishia\",\"url\":\"https:\\\/\\\/phishia.fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Logotype.png\",\"contentUrl\":\"https:\\\/\\\/phishia.fr\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/Logotype.png\",\"width\":512,\"height\":128,\"caption\":\"Phishia\"},\"image\":{\"@id\":\"https:\\\/\\\/phishia.fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/phishia\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/phishia.fr\\\/#\\\/schema\\\/person\\\/ab1f38ad06f750da69863e8f06e86528\",\"name\":\"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Organizing a cyber crisis management exercise for the hospital - Phishia","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/phishia.fr\/en\/blog\/incident-response\/organizing-a-cyber-crisis-management-exercise-for-the-hospital\/","og_locale":"en_US","og_type":"article","og_title":"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital - Phishia","og_description":"Bloc op\u00e9ratoire paralys\u00e9, SIH indisponible, urgences satur\u00e9es, appels des m\u00e9dias et de l\u2019ARS qui s\u2019encha\u00eenent\u2026C\u2019est ce que vivent de plus en plus de\u00a0CHU, centres hospitaliers et GHT\u00a0lors d\u2019attaques informatiques majeures. Plans, proc\u00e9dures et PCA\/PRA sont indispensables, mais le jour o\u00f9 la crise \u00e9clate, une question domine :\u00a0 \u00a0Les \u00e9quipes ont-elles d\u00e9j\u00e0 v\u00e9cu ce type de [&hellip;]","og_url":"https:\/\/phishia.fr\/en\/blog\/incident-response\/organizing-a-cyber-crisis-management-exercise-for-the-hospital\/","og_site_name":"Phishia","article_published_time":"2025-11-25T15:12:17+00:00","article_modified_time":"2025-12-11T01:07:00+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere-1024x576.png","type":"image\/png"}],"author":"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#article","isPartOf":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/"},"author":{"name":"Enzo Debosque, consultant junior en CyberS\u00e9curit\u00e9","@id":"https:\/\/phishia.fr\/#\/schema\/person\/ab1f38ad06f750da69863e8f06e86528"},"headline":"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital","datePublished":"2025-11-25T15:12:17+00:00","dateModified":"2025-12-11T01:07:00+00:00","mainEntityOfPage":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/"},"wordCount":1123,"publisher":{"@id":"https:\/\/phishia.fr\/#organization"},"image":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#primaryimage"},"thumbnailUrl":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png","keywords":["Sant\u00e9"],"articleSection":["R\u00e9ponse aux incidents"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/","url":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/","name":"Organizing a cyber crisis management exercise for the hospital - Phishia","isPartOf":{"@id":"https:\/\/phishia.fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#primaryimage"},"image":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#primaryimage"},"thumbnailUrl":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png","datePublished":"2025-11-25T15:12:17+00:00","dateModified":"2025-12-11T01:07:00+00:00","breadcrumb":{"@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#primaryimage","url":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png","contentUrl":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/11\/Bannieres-YouTube-Gestion-de-criseCyber-hospitaliere.png","width":2560,"height":1440},{"@type":"BreadcrumbList","@id":"https:\/\/phishia.fr\/blog\/reponse-aux-incidents\/organiser-un-exercice-de-gestion-de-crise-cyber-pour-lhopital\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/phishia.fr\/"},{"@type":"ListItem","position":2,"name":"R\u00e9ponse aux incidents","item":"https:\/\/phishia.fr\/blog\/category\/reponse-aux-incidents\/"},{"@type":"ListItem","position":3,"name":"Organiser un exercice de gestion de crise cyber pour l\u2019h\u00f4pital"}]},{"@type":"WebSite","@id":"https:\/\/phishia.fr\/#website","url":"https:\/\/phishia.fr\/","name":"Phishia","description":"IT Consulting, Cybersecurity, Sustainability","publisher":{"@id":"https:\/\/phishia.fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/phishia.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/phishia.fr\/#organization","name":"Phishia","url":"https:\/\/phishia.fr\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/phishia.fr\/#\/schema\/logo\/image\/","url":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/01\/Logotype.png","contentUrl":"https:\/\/phishia.fr\/wp-content\/uploads\/2025\/01\/Logotype.png","width":512,"height":128,"caption":"Phishia"},"image":{"@id":"https:\/\/phishia.fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/phishia\/"]},{"@type":"Person","@id":"https:\/\/phishia.fr\/#\/schema\/person\/ab1f38ad06f750da69863e8f06e86528","name":"Enzo Debosque, Junior CyberSecurity Consultant"}]}},"_links":{"self":[{"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/posts\/3849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/comments?post=3849"}],"version-history":[{"count":10,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/posts\/3849\/revisions"}],"predecessor-version":[{"id":3927,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/posts\/3849\/revisions\/3927"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/media\/3902"}],"wp:attachment":[{"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/media?parent=3849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/categories?post=3849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/phishia.fr\/en\/wp-json\/wp\/v2\/tags?post=3849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}