Behavioral Incident Response Strategies in Clinical Settings

Joint white paper with Health-ISAC and the Hawaii State Fusion Center (HSFC)
In 2024, Health-ISAC and the Hawaii State Fusion Center (HSFC) worked together to develop a white paper showcasing the benefits of integrating behavioral response teams in healthcare delivery environments, such as reduced workplace violence and increasing the scope of incidents that in-house resources can respond to. This paper used insights from a survey of the Health-ISAC membership about behavioral risk management and the Health-ISAC Physical Security Working Group, a group of physical security experts from various healthcare organizations across the Health-ISAC Membership that helped inform implementation strategies that navigate healthcare-specific obstacles and maximize behavioral response capabilities. The major conclusions drawn from this endeavor are as follows:
Key Judgements
- Behavioral incident management teams will increase the scope of incidents healthcare organizations will be equipped to respond to, creating a well-rounded security presence.
- There is currently a mental health crisis that is impacting the safety and well-being of healthcare workers, a problem that behavioral incident management teams can help alleviate.
- Implementation of behavioral risk management elements are attainable in healthcare organizations of all sizes, and scalable to accommodate organizational growth through the Behavioral Threat Assessment and Management (BTA/M) Split model.
- Behavioral incident management teams have proven to be successful in peer-reviewed studies and healthcare organizations that adopted them.
- Related Resources & News
- The ISAC Advantage for Collective Threat Intelligence
- Health-ISAC Hacking Healthcare 3-4-2025
- 2025 Newsletter – March
- Health-ISAC 2024 Annual Report
- Healthcare Cyberattacks Continue to Escalate in 2025
- Trump’s CISA Cutbacks Worry Cybersecurity Pros
- Top 5 cybersecurity concerns for healthcare in 2025
- Change Healthcare’s Mega Attack: 1 Year Later
- Health Systems Must Develop Plans to Assume Cyber Responsibility for Medical Devices When Manufacturer Support Wanes