01471nas a2200169 4500000000100000008004100001260000900042653005100051653001900102653002600121653001900147100001900166245015000185300001100335490000700346520094800353 2020 d c202010aCritical Information Infrastructure Protection10aCyberse-curity10aResilience management10aSHAPES project1 aJyri Rajamäki00aResilience Management Framework for Critical Information Infrastructure: Designing the Level of Trust that Encourages the Exchange of Health Data a91-1080 v473 a

This article presents the conceptual resilience governance framework and design aspects for resilient cyber-physical eHealth systems. Our safety and security thinking has been based on the supposition that inside defensive walls we are safe. The focus of our actions has been the control of our own systems, the improvement of the protection and staying inside the protection. However, nobody is able to control complex large integrated cyber-physical systems while, on the other hand, coordination and cooperation are needed. In eHealth, this means that the focus is moved from the control and securing of health information towards utilising of eHealth to promote health. On the other hand, we have an urgent need to complement the existing knowledge-base of safety and risk management by developing frameworks and models enabling network-wide resilience management that strives for maintaining and improving critical functionalities.