Behavioral Incident Response Strategies in Clinical Settings
Joint white paper with Health-ISAC and the Hawaii State Fusion Center (HSFC)
In 2024, Health-ISAC and the Hawaii State Fusion Center (HSFC) worked together to develop a white paper showcasing the benefits of integrating behavioral response teams in healthcare delivery environments, such as reduced workplace violence and increasing the scope of incidents that in-house resources can respond to. This paper used insights from a survey of the Health-ISAC membership about behavioral risk management and the Health-ISAC Physical Security Working Group, a group of physical security experts from various healthcare organizations across the Health-ISAC Membership that helped inform implementation strategies that navigate healthcare-specific obstacles and maximize behavioral response capabilities. The major conclusions drawn from this endeavor are as follows:
Key Judgements
- Behavioral incident management teams will increase the scope of incidents healthcare organizations will be equipped to respond to, creating a well-rounded security presence.
- There is currently a mental health crisis that is impacting the safety and well-being of healthcare workers, a problem that behavioral incident management teams can help alleviate.
- Implementation of behavioral risk management elements are attainable in healthcare organizations of all sizes, and scalable to accommodate organizational growth through the Behavioral Threat Assessment and Management (BTA/M) Split model.
- Behavioral incident management teams have proven to be successful in peer-reviewed studies and healthcare organizations that adopted them.
- Related Resources & News
- Threat Bulletin: SimpleHelp RMM Software Leveraged in Exploitation Attempt to Breach Networks
- EU Commission Calls for Health Sector ‘Cyber Action Plan’
- How to Manage Cyber Risk of Medical Devices – for Life
- Health-ISAC Hacking Healthcare 1-24-2025
- Cyber Threat Alliance Publishes 2025 Cybersecurity in the Age of AI
- AI, Ransomware, and Medical Devices: Safeguarding Healthcare
- Securing Health Data in 2025: The Rising Cybersecurity Challenges
- Software Supply Chains and ISACs – The Inevitability Curve Podcast EP14
- Health-ISAC Hacking Healthcare 1-17-2025
- New HIPAA Cybersecurity Rules Pull No Punches