Abstract:Background and research question: In case of events such as a cyber attack or a mass casualty incident, ad hoc measures have to be taken in hospitals. As part of the critical infrastructure, hospitals are required by law to prepare, update and exercise alarm and emergency plans for various special situations. The processes and instruments involved for emergency response are defined in the hospital alert and emergency planning. The present study aims to explain with which resources and for which special situations hospitals are prepared. Methods: A prospective, exploratory, anonymous survey of hospitals in Germany was conducted. Hospitals with both internal medicine and surgery departments were included. Out of 2497 hospitals listed in the German Hospital Directory ( www.deutsches-krankenhaus-verzeichnis.de ), 1049 met the inclusion criteria. After correcting for hospital groups with shared administrations, 850 employees were identified and contacted by e‑mail. Quality and risk management managers were asked about resources, risks, and content of their own hospital alert and emergency planning using a standardized questionnaire. The survey was conducted using the online platform EFS Survey (Tivian XI GmbH, Cologne) via www.unipark.de . Access to the survey was via a nonpersonalized hyperlink. Apart from the size and type of hospital surveyed, no data were collected that would allow identification of an individual person. Results: Of the participating hospitals 45% (n = 43) were primary care hospitals, 24% (n = 23) were specialty care hospitals, 10% (n = 9) were nonuniversity maximum care hospitals, and 21% (n = 20) were university maximum care hospitals. In total 95 hospitals participated in the survey, of which 98% (n = 93) reported having a hospital alert and emergency plan. Preparation for individual scenarios varied widely. Of the participating hospitals 45% (n = 43) reported having been the target of cyber attacks with an emphasis on maximum care hospitals (55%, n = 11 of 20). Technical redundancy for computer systems is available in 67% (n = 63) of participating hospitals, while independent means of communication exist in 50% (n = 47) of hospitals. A physician-staffed crisis and disaster management unit existed in 60% (n = 56) of the surveyed hospitals. At least a part time position for planning issues was installed in 12 hospitals. Conclusion: Most participating hospitals are aware of the need for a hospital alert and emergency plan and have various scenario-specific plans in place. Especially mass casualty events, fire and hospital evacuation scenarios are uniformly covered among participating hospitals; however, gaps appear to exist not only for chemical, biological or radionuclear situations but also especially in the area of extreme weather events and infrastructure failures. Only about two thirds of all participating hospitals have contingency plans for water supply and/or heating failures. An important limitation of the study is the comparatively low response rate of 12.9% (n = 95 of 850). While primary care hospitals were underrepresented in the study, 32% of Germany's larger hospitals (> 800 beds) participated. In the future, there is a particular need to engage enough medical staff in the area of hospital alert and emergency planning and refunding of these measures by hospitals.

Epidemic? The Attack Surface of German Hospitals during the COVID-19 Pandemic

Economic Impact of a Hospital Cyberattack in a National Health System: Descriptive Case Study

In Search of Patient Zero: Visual Analytics of Pathogen Transmission Pathways in Hospitals

When all computers shut down: the clinical impact of a major cyber-attack on a general hospital

[Special emergency situations and hazard control in German hospitals-A survey on the current state]

Underestimating attacks: comparing two sources of publicly-available data about attacks on health care in 2017

Using attack graphs to defend healthcare systems from cyberattacks: a longitudinal empirical study

Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses

Workforce strategies during the first wave of the COVID-19 pandemic: a retrospective online survey at intensive care units in Germany

[Forced centralized allocation in the emergency department-what has the COVID-19 pandemic changed?]

Locating Medical Information during an Infodemic: Information Seeking Behavior and Strategies of Health-Care Workers in Germany

The elephant in the room: cybersecurity in healthcare

Safety, Surge, and Strain: Where and When Does Risk Occur in Critical Care?*

[IT Failures in Hospitals - Structures and Processes in Hospitals for Coping Cyber Attacks]

SARS-CoV-2 infections in patients, health care workers and hospital outbreaks during the first 3 waves of the pandemic: a retrospective analysis in a secondary care hospital network in Germany

Influence of public health and infection control interventions during the severe acute respiratory syndrome coronavirus 2 pandemic on the in-hospital epidemiology of pathogens: in hospital versus community circulating pathogens

A deeper look into cybersecurity issues in the wake of Covid-19: A survey

Innovative Regional Services and Heterogeneous Communication Channels: Results from the Nationwide German egePan Project for Pandemic Management

Behavioral responses to a cyber attack in a hospital environment

Impact of the COVID-19 Pandemic on Inpatient Antibiotic and Antifungal Drug Prescribing Volumes in Germany

Epidemiology of common infectious diseases before and during the COVID-19 pandemic in Bavaria, Germany, 2016 to 2021: an analysis of routine surveillance data