Building a Cyber-Ready Workforce 

---

Corrie Halas, VP of Clinical Learning, Amplifire

Cybersecurity Is Now a Patient Safety Issue 

Healthcare has entered a new era of clinical risk. Cyberattacks are no longer isolated IT events. They are disruptions to patient care. 

In 2025, healthcare remained the costliest industry for data breaches for the 14th consecutive year, with the average breach costing $7.42 million globally and more than $10 million in the United States. At the same time, cyber incidents continue to disrupt hospitals and health systems, delaying care, limiting access to clinical systems, and challenging the delivery of safe, effective patient care. These realities reinforce an important truth: cybersecurity is no longer just an IT responsibility. It is a patient safety imperative. 

From Downtime Readiness to Cyber Readiness 

For decades, nurses have prepared for technology failures as part of delivering safe patient care. We’ve practiced EHR downtimes, medication dispensing cabinet outages, and documentation contingencies because we understand that patient care cannot stop when technology does. But today’s healthcare environment demands the next evolution of that mindset. 

As connected medical devices, smart pumps, remote monitoring systems, and AI-enabled technologies become more deeply embedded in care delivery, cyber readiness must become as fundamental to nursing practice as downtime readiness. 

The difference is subtle but significant. Historically, nurses have been trained to respond after a technology disruption occurs. The future requires nurses to recognize the earliest signs that something isn’t right: an infusion pump behaving differently than expected, a bedside monitor displaying unusual activity, or a workstation suddenly requesting credentials outside of normal workflows. 

These aren’t simply technical issues to ignore or work around. They may be the earliest indicators of a cyber event that could compromise patient safety. 

Just as nurses are trained to recognize subtle changes in a patient’s condition, we must now develop the same clinical vigilance for the technologies that support care. Nurse leaders can drive this shift by encouraging teams to question unusual device behavior, report unexpected technology issues without hesitation, and participate in cyber readiness exercises that build confidence before an incident occurs. 

The Leadership Opportunity 

We’ve spent years preparing nurses to respond when technology fails. The next evolution is preparing them to recognize when technology is being compromised before it fails. 

That shift from downtime readiness to cyber readiness may become one of the defining leadership responsibilities for nurse executives over the next decade. Organizations that embrace this evolution won’t simply recover more quickly from cyber incidents. They’ll cultivate a workforce capable of recognizing risk earlier, protecting patients more effectively, and strengthening resilience across the entire healthcare system. 

Building that workforce requires more than awareness. It requires learning experiences that help clinicians recognize emerging risks, strengthen critical thinking, and retain knowledge they can apply under pressure. For organizations committed to building resilient clinical workforces, cyber readiness is no longer simply another competency to teach. It is becoming an essential component of patient safety and nursing leadership. 

Sources