Je browser is verouderd en geeft deze website niet correct weer. Download een moderne browser en ervaar het internet beter, sneller en veiliger!

Our role in Dutch Healthcare

All hospitals in the Netherlands as well as mental and other healthcare institutions can register with Z-CERT as a constituent. Z-CERT will be extending its services to other healthcare providers in the near future.

Collaborations

Z-CERT closely collaborates with other (inter-)national CERTs, such as the National Cyber Security Center (NCSC) and the Information Security Service (ISS) for the municipalities, on a daily basis. Z-CERT is a foundation with a not-for-profit objective.

Incident Response

If a healthcare institution has been affected by an ICT or data security incident, Z-CERT can offer advice on incident management, handling, and resolution. Additionally, we can conduct digital forensic investigations in order to identify and minimize technical, financial, and reputation risk.

Detection

Z-CERT monitors participants' external-facing systems for vulnerabilities, compromised infrastructure, and malware-related blacklists. In case of any positive hits, Z-CERT informs the affected participant(s) to offer advice and support.
 

Prevention

Z-CERT informs its constituents of any vulnerabilities detected in IT systems, medical devices, medical networks and medical applications. For participants affected by a vulnerability, Z-CERT provides guidance on how to best deal with the situation. Z-CERT also sends out alerts regarding possible threats and current attacks. 

Knowledge and Expertise

Z-CERT shares knowledge with constituents and beyond through whitepapers, webinars, and podcasts; facilitates meetings for its participants; and hosts network events and theme sessions.

Handling responsible disclosure notifications

Any vulnerabilities detected in healthcare facility systems, medical networks and medical devices by third parties can be reported in accordance our CVD process [link]. Upon receipt of such a report, Z-CERT will immediately reach out the participant in order to correct the detected vulnerability, and will act as first point of contact for the researcher.