Health Industry Cybersecurity: Cyber Incident Checklist
Healthcare & Public Health Sector Coordinating Councils

This Operational Continuity-Cyber Incident (OCCI) checklist provides a flexible template for operational staff and executive management to respond to and recover from an extended enterprise outage due to a serious cyber attack. 

The checklist’s suggested operational structures and tasks can be modified or refined according to an organization’s size, resources, complexity and capabilities. 

The checklist represents the best collective thinking of private-sector cybersecurity and emergency management executives of the HSCC Incident Response/Business Continuity (IRBC) Task Group of the Health Sector Coordinating Council’s Cybersecurity Working Group (CWG). It is not associated in any way with any regulatory compliance program.