The association Healthcare Cyber Security Center (H-CSC) provides its members with a wide range of services to support them in improving their cybersecurity, regardless of their current maturity level. These services are developed with and for the members to ensure they are tailored to the specific needs of the healthcare institutions.


Services
Vendor exchange channels
The H-CSC exchange channels enable members to engage in targeted discussions on manufacturers, products, and services in the field of cybersecurity via a collaborative platform. Within dedicated channels, practical experiences, expert assessments, and best practices can be shared and discussed across the community. The service fosters open and trust-based dialogue and supports well-informed decision-making based on shared experience.
Procurement guidelines
Healthcare institutions require secure IT systems and medical devices. However, individual organizations often struggle to enforce security standards on their own. H-CSC therefore consolidates the security requirements of its members, creating a strong collective market voice. As a result, information security is considered already during the evaluation phase and leads to more secure IT systems in the long term.
Awareness campaigns
H-CSC consolidates successful member campaigns in a clearly structured digital catalog. It provides an overview of benefits, effort, costs, materials, and contacts at a glance. Members can quickly find inspiring ideas and significantly reduce their own preparation efforts.
Library
The library serves as a central platform for providing and sharing proven templates, policies, and example documents from H-CSC member organizations. The content can be reused, adapted, and used to review internal documentation, particularly for documentation on Information Security Management Systems (ISMS), for baseline protection requirements for IT systems, for technical incident response playbooks (TIRP), and for awareness. All documents are available in English, German, French, and Italian.
Threat intelligence sharing
Through this service, members gain central access to verified, sector-relevant technical information on current cyber threats. The H-CSC platform enables the secure exchange of information on threats, Indicators of Compromise (IoCs) and vulnerabilities among H-CSC members. Centrally curated threat intelligence data supports the early detection of attacks as well as effective prevention and protection measures. Through standardised interfaces, the information can be efficiently integrated into existing security solutions. This reduces manual analysis efforts while creating a shared situational picture and strengthening both individual and collective cyber resilience.
Darknet monitoring
The darknet monitoring service provided by H-CSC continuously monitors relevant darknet sources, marketplaces, and forums for indications of compromised credentials and sensitive organizational information. Potential security incidents are identified and reported at an early stage, allowing affected organizations to take timely and appropriate protective and mitigation measures.
H-CSC conference
The conferences foster networking among healthcare institutions, the exchange of experiences and results, and continuing education through expert presentations. They are aimed at internal staff of healthcare institutions. Participation is free of charge for two employees from each H-CSC member. Additional staff from member institutions may participate at a reduced rate.
Monthly webinars
The webinars support experience sharing, knowledge exchange, and continuing education. They cover H-CSC services and positions as well as member experiences that may not necessarily reflect the official stance of H-CSC. The webinars are aimed at all interested employees of healthcare institutions that are members of H-CSC and are free of charge.
ERFA group for Information Security
The ERFA Group enables structured and confidential exchange among representatives of healthcare institutions, with the goal of strengthening information security among H-CSC members in a practical and future-oriented way. Participants gain relevant, actionable knowledge to support their strategic and operational responsibilities. The group is aimed at CISOs as well as IT security managers.
Coming soon
Technology radar
The technology radar helps healthcare institutions compare vendor marketing claims with real-world experiences from other institutions using the same technologies. For this purpose, H-CSC maintains a registry of technologies used by application area and identifies relevant contacts. Members update their contributions via a dedicated form.
eLearning
Healthcare institutions require effective information security training, but in-house development is resource-intensive and standard courses are often too generic. H-CSC develops tailored eLearning modules together with its members for the Swiss healthcare sector. The Moodle-based lessons can be integrated into any learning management system using the SCORM format.
2nd opinion
This service enables H-CSC members to obtain expert opinions, experience, and support from other healthcare institutions on cybersecurity and information security topics. H-CSC acts exclusively as a coordination and matchmaking platform, making existing expertise within the community visible.
