METHOD FOR CYBER RISK ASSESSMENT IN TELEMEDICINE

Abstract

The development of telemedicine expands the use of information and communication technologies for remote consultations, patient monitoring, and medical data exchange. The technological environment integrates endpoint devices, communication networks, application platforms, cloud and server resources, identity and access management systems, and connected medical devices. The interaction between these components creates a specific cyber-risk profile in which a local technical weakness may affect both information security and service availability.
This paper proposes a method for quantitative cyber risk assessment in telemedicine. The method includes identification of the main risk components, assessment through normalized indicators, formation of a component risk vector, weighted aggregation, and a correction mechanism preserving the influence of the component with the highest risk value. A parameter representing the criticality of the telemedicine service is also introduced. The method is examined through three scenarios with different risk profiles and through reassessment after implementation of a protective measure. The results demonstrate differentiation between risk states and a measurable change in the final score when technical parameters are modified.