AAPM working group on cybersecurity report 438: A white paper on cybersecurity management for business continuity in radiology and radiation therapy

A growing number of clinics have experienced disruptions of clinical services due to cyberattacks. To provide continuity of care, medical physicists should work with Information Technology (IT) staff to develop a business continuity plan. Such planning requires the participation of many stakeholders and should include the development of policies and procedures that not only make the clinic more cyber-resilient but also address patient safety and ethics concerns. This report discusses the business continuity planning considerations for radiology and radiation oncology.