Grass, Emilia;
Pagel, Christina;
Crowe, Sonya;
Ghafur, Saira;
(2024)
A stochastic optimisation model to support cybersecurity within the UK national health service.
Journal of the Operational Research Society
10.1080/01605682.2024.2436063.
(In press).
Preview |
Text
FINAL PUBLISHED A stochastic optimisation model to support cybersecurity within the UK national health service.pdf - Published Version Download (1MB) | Preview |
Abstract
Over the past decade, the adoption of new digital technologies in healthcare has surged, significantly enhancing care delivery and accessibility. However, this digital transformation has been accompanied by a sharp increase in cyber-attacks, posing severe risks to hospital functionality and patient safety. To address the challenge of planning for uncertain future cyber incidents, we propose a two-stage stochastic model designed to bolster the cyber resilience of healthcare providers by selecting optimal countermeasures in preparation for upcoming cyber incidents. Numerical tests demonstrate the model’s effectiveness, with the Value of the Stochastic Solution showing a 21% improvement over a deterministic approach. To be optimally equipped even for low-probability high-impact attacks we incorporate the risk measure Conditional Value-at-Risk. The corresponding countermeasure solution led to 44% fewer rejected patients in a worst-case scenario. The robustness of the proposed solution is underscored by its consistent performance across various scenarios, budget levels, and risk preferences, making it a reliable tool for enhancing cybersecurity in healthcare. These results highlight the importance of tailored, robust cybersecurity strategies in healthcare, ensuring preparedness for a wide range of potential threats.
Type: | Article |
---|---|
Title: | A stochastic optimisation model to support cybersecurity within the UK national health service |
Open access status: | An open access version is available from UCL Discovery |
DOI: | 10.1080/01605682.2024.2436063 |
Publisher version: | https://doi.org/10.1080/01605682.2024.2436063 |
Language: | English |
Additional information: | Copyright © 2024 The Author(s). Published by Informa UK Limited, trading as Taylor & Francis Group This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited. The terms on which this article has been published allow the posting of the Accepted Manuscript in a repository by the author(s) or with their consent. |
Keywords: | Stochastic programming; cybersecurity; risk measure CVaR; health services; NHS |
UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Maths and Physical Sciences UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Maths and Physical Sciences > Dept of Mathematics UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Maths and Physical Sciences > Dept of Mathematics > Clinical Operational Research Unit |
URI: | https://discovery-pp.ucl.ac.uk/id/eprint/10202652 |
Archive Staff Only
![]() |
View Item |