Cyber resilience in hospitals report launched by Deloitte India and DSCI

The Indian healthcare industry is undergoing a major digital transformation as hospitals evolve into tech-driven centres incorporating telemedicine, AI-powered diagnostics and robotic surgeries, increasing their vulnerability to cyberattacks. Deloitte Touche Tohmatsu India and the Data Security Council of India (DSCI) have collaboratively launched a report titled “Cyber Resilience in Hospitals.” This report reveals significant strides in the healthcare sector’s approach to cybersecurity, with 89 per cent of hospitals adopting Third-Party Risk Management (TPRM) systems. These systems are crucial in detecting and addressing cybersecurity threats within the vendor network, protecting sensitive patient data and strengthening vendor relationships.

Despite this progress, the report notes that only 10 per cent of hospitals have fully implemented comprehensive data privacy programmes. However, introducing the Digital Personal Data Protection Act (DPDPA) could drive a rapid increase in adoption across the sector.  The analysis suggests that hospitals must allocate 12–15 per cent of their budgets to cybersecurity and digital infrastructure over the next two years to remain competitive. Notably, 50 per cent of hospitals have already secured cyber insurance policies to mitigate the financial risks posed by data breaches and ransomware attacks, reinforcing the critical role of a strong cybersecurity framework in maintaining resilience amid the rapidly evolving landscape.

While 90 per cent of hospitals have adopted crisis management plans to handle potential cyber-attacks, the report notes that only 60 per cent are conducting crisis simulation exercises, leaving many institutions underprepared for potential threats. As hospitals continue to invest in AI-powered diagnostics, Internet of Things (IoT) devices and remote monitoring technologies, the growing risk of ransomware attacks, data breaches and insider threats becomes a significant concern.

India’s private healthcare sector is set for significant growth in the coming years, fuelled by technological innovations such as robotic surgeries and personalised medicine. Nearly 80 per cent of hospitals in India now maintain Electronic Medical Records (EMRs), and 70 per cent prioritise Zero Trust security frameworks, demonstrating the sector’s commitment to technology-driven advancements.

The report further highlights challenges in the sector, such as a shortage of skilled professionals, operational inefficiencies and financial pressures resulting from cloud migration and cybersecurity demands. Hospitals must invest in workforce training, system upgrades and advanced cybersecurity protocols to mitigate risks. Strengthening collaboration between IT and healthcare teams while prioritising risk management strategies will help hospitals secure their digital infrastructure and provide efficient patient care.

Vikram Venkateswaran, Partner, Deloitte India, said, “In today’s rapidly evolving healthcare landscape, hospitals must navigate digital transformation with a strong focus on cybersecurity. Investing in cloud technologies and addressing skill gaps will be essential to building resilient systems. Using AI-driven diagnostics, remote monitoring and advanced cybersecurity tools will protect sensitive patient data and enhance care delivery and operational efficiency.”

Vinayak Godse, Chief Executive Officer, DSCI, added, “Hospitals would integrate advanced technologies such as AI and telemedicine. As India’s healthcare sector evolves with the progress made during the COVID-19 pandemic, hospitals are prioritising AI-driven diagnosis, digitisation of health records and personalised medicine. They are laying down the foundations of future-ready digital infrastructure. However, balancing rapid tech adoption with better cyber security, resiliency preparedness and strong governance ensures sustainable progress. The success of India as a global leader in healthcare innovation depends on the strength of cyber security, privacy and governance.”

The future of India’s healthcare sector relies on integrating innovation with robust cybersecurity measures. Hospitals must prioritise investments in talent, technology and governance to build resilient digital infrastructures. Strengthening public-private collaborations will address operational challenges and enhance cybersecurity readiness. By focusing on workforce skilling and advanced technologies, the industry can protect patient data while improving care delivery, positioning India as a leader in healthcare innovation and digital security.